CVE-2021-24115

CVE-2021-24115 affects Botan prior to 2.17.3, where constant-time computations are not applied to certain decoding/encoding operations (base32, base58, base64, and hex). The vulnerability is in the crypto/encoding paths of Botan; impact is shown as high to critical in CVSS data (NVD: 7.5/3.1 v3.1...

CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

Observable Timing Discrepancy

Constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

EulerOS 2.0 SP2 : spice (EulerOS-SA-2021-1361)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...

Botan Security Vulnerabilities

Botan is a library of cryptographic algorithms written in C++. It supports a variety of algorithms such as AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability exists in Botan before 2.17.3, which stems from the fact that constant time calculations are not used for certain...

CVE-2020-24944

picoquic before 3rd of July 2020 allows attackers to cause a denial of service infinite loop via a crafted QUIC frame, related to the picoquicdecodeframes and picoquicdecodestreamframe functions and epoch==3...

Netty Security Vulnerabilities

Netty is a non-blocking I/O client-server framework from the Netty community that is primarily used to develop Java web applications such as protocol servers and clients. A security vulnerability exists in Netty versions prior to 4.1.59, which stems from the fact that local information can be mad...

wolfssl:fuzzer-wolfssh-server-randomize: Crash in mp_read_unsigned_bin

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5912002306375680 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server-randomize Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

graphicsmagick:coder_CALS_fuzzer: Use-of-uninitialized-value in Fax4Decode

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=4780325702074368 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderCALSfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

serenity:FuzzICOLoader: Heap-buffer-overflow in codes

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6025895770980352 Project: serenity Fuzzing Engine: libFuzzer Fuzz Target: FuzzICOLoader Job Type: libfuzzerasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

HCL OneTest Information Disclosure Vulnerability

HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. A security vulnerability exists in HCL OneTest...

CVE-2020-14246

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

CVE-2020-14246: Use of a Broken or Risky Cryptographic Algorithm

HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials...

HCL OneTest 安全漏洞

HCL OneTest is a software testing tool from HCL India that provides multiple testing options. The software supports API testing, functional testing, UI testing, performance testing and service virtualization to support software automation testing. A security vulnerability exists in HCL OneTest...

PT-2021-9704

Name of the Vulnerable Software and Affected Versions HCL OneTest Performance versions 9.5 through 10.1 Description The issue is related to the use of basic authentication in HCL OneTest Performance, which is considered relatively weak. An attacker could potentially decode the encoded credentials...

EulerOS 2.0 SP5 : spice (EulerOS-SA-2021-1232)

According to the version of the spice package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before spice-0.14.2-1. Bot...

EulerOS 2.0 SP5 : spice-gtk (EulerOS-SA-2021-1233)

According to the versions of the spice-gtk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple buffer overflow vulnerabilities were found in the QUIC image decoding process of the SPICE remote display system, before...

PT-2021-6812

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 4.6.0 Description The issue is related to a side-channel vulnerability in base64 PEM file decoding, which allows attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack...

wolfmqtt:wolfmqtt-fuzzer: Crash in MqttDecode_Num

Project: https://github.com/wolfSSL/wolfMQTT.git Detailed Report: https://oss-fuzz.com/testcase?key=4540422754009088 Project: wolfmqtt Fuzzing Engine: libFuzzer Fuzz Target: wolfmqtt-fuzzer Job Type: libfuzzerasanwolfmqtt Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x621000013a16...