CVE-2022-21449-showcase

Programa de demostración para mostrar CVE-2022-21449 Por favor, ejecútalo con JDK 17.0.0 Oh sí, aquí está la captura de pantalla...

SignChecker

SignChecker Herramienta de prueba para demostrar la vulnerabilidad de CVE-2022-21449...

jfrog-CVE-2022-21449

CVE-2022-21449 Resumen Esta herramienta permite realizar un escaneo rápido de archivos de código compilado .jar, .war, etc. para comprobar la vulnerabilidad a CVE-2022-21449 mediante la búsqueda de la cadena que indica el uso del algoritmo ECDSA. La herramienta utiliza Python3 sin requisitos...

CVE-2022-21449-vuln-test

CVE-2022-21449 Probador de vulnerabilidad Introducción Hay una nueva CVE-2022-21449 que tiene un error en la verificación de firmas ECDSA. Es uno de los algoritmos utilizados con JWT, por ejemplo. Citando la publicación del blog Si ha implementado Java 15, Java 16, Java 17 o Java 18 en producción...

AIS3-2024-Project-D5Team

AIS3-2024-Project-TeamD5 Reappear-CVE-2022-21449-TLS-PoC Before we begin, I would like to thank and pay tribute to some people 1 Neil Madden ; discovered and disclosed CVE-2022-21449, and here is his excellent WriteUp 2 Khaled Nassar ; completed the PoC for easy Demo 3 YuZheng GeGe's Security...

CVE-2022-21449-TLS-PoC

CVE-2022-21449-TLS-PoC CVE-2022-21449 también denominadas Psychic Signatures en el análisis de la vulnerabilidad realizado por Neil Madden Prueba de concepto que demuestra su uso con un cliente vulnerable y un servidor TLS malicioso. El servidor malicioso presenta una cadena de certificados válid...

CVE-2022-21449

Este repositorio no tiene un README...

psychic-signatures

CVE-2022-21449: Firmas Psíquicas en Java...

CVE-2022-21449

CVE-2022-21449 Script de Zeek para detectar intentos de explotación de CVE-2022-21449 dirigidos a clientes TLS. Solo funciona para TLS 1.2 y versiones anteriores. Instalación zkg install https://github.com/thack1/CVE-2022-21449 Ejecutar Ejecutar contra el archivo pcap suministrado: $ zeek -Cr...

CVE-2022-21449

CVE 2022 21449 implementación en python Este proyecto permite: Dibujar una curva elíptica con los parámetros deseados, sobre un cuerpo finito o no Generar un par de claves a partir de una curva elíptica dada Cifrar / Descifrar un mensaje mediante ECIES Firmarlo / verificarlo usando ECDSA Simular...

K32172755: Multiple Java vulnerabilities CVE-2022-21426, CVE-2022-21434, CVE-2022-21443, CVE-2022-21476, and CVE-2022-21496

Security Advisory Description CVE-2022-21426 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JAXP. Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5,...

AlmaLinux 9 : java-17-openjdk (ALSA-2022:1729)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1729 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak

Summary Java is used by IBM Robotic Process Automation for Cloud Pak as part of several container services that run Java applications. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated...

RHEL 9 : java-17-openjdk (RHSA-2022:1729)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1729 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixe...

SUSE: Security Advisory (SUSE-SU-2022:2650-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for java-1_8_0-ibm (SUSE-SU-2022:2650-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2022:2540-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2022:2539-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:2540-1 Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Update to Java 8.0 Service Refresh 7 Fix Pack 10 bsc1201643, including fixes for: - CVE-2022-21476 bsc1198671, CVE-2022-21449 bsc1198670, CVE-2022-21496 bsc1198673, CVE-2022-21434 bsc1198674, CVE-2022-21426 bsc1198672, CVE-2022-21443...

OESA-2022-1702 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 17.0.2 and 18; Oracle GraalVM Enterprise Edition: 21.3.1 and 22.0.0.2...