Lucene search
K

5 matches found

CNNVD
CNNVD
added 2026/04/24 12:0 a.m.6 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, where the rxkaddecryptticket function does not check whether the decryption operation was successful. As a result,...

9.8CVSS5.8AI score0.00514EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/04/21 12:0 a.m.7 views

The vulnerability of the tls_decrypt_ticket function in the OpenSSL library exists due to insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the tlsdecryptticket function in the OpenSSL library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS7.1AI score0.26441EPSS
Exploits1References27Affected Software5
OSV
OSV
added 2016/09/16 12:0 a.m.6 views

UBUNTU-CVE-2016-6302

The tlsdecryptticket function in ssl/t1lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short...

7.5CVSS7.2AI score0.26441EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.4 views

The vulnerability of the OpenSSL software allows a malicious attacker to compromise the accessibility of protected information.

A memory leak in the tlsdecryptticket function in t1lib.c of OpenSSL allows malicious actors operating remotely to trigger a service failure excessive memory consumption by using a specially crafted session credential, which causes a verification error for integrity checking...

5CVSS6.5AI score0.23598EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2014/10/19 1:55 a.m.1 views

DEBIAN-CVE-2014-3567

Memory leak in the tlsdecryptticket function in t1lib.c in OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j allows remote attackers to cause a denial of service memory consumption via a crafted session ticket that triggers an integrity-check failure...

7.1CVSS8.8AI score0.23598EPSS
Exploits0References1
Rows per page
Query Builder