1182 matches found
UBUNTU-CVE-2023-50980
gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...
UBUNTU-CVE-2023-50981
ModularSquareRoot in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service infinite loop via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853...
CVE-2023-50981
ModularSquareRoot in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service infinite loop via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853...
Code injection
ModularSquareRoot in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service infinite loop via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853...
CVE-2023-50980
gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...
Crypto++ Security Vulnerability
Crypto++ is a C++ cryptographic method library A security vulnerability exists in Crypto++ version 8.9.0, which stems from a security issue in the ModularSquareRoot function that results in an infinite loop. An attacker exploiting this vulnerability may be able to create an incorrectly formatted...
CVE-2023-50981
ModularSquareRoot in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service infinite loop via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853...
CVE-2023-50981
ModularSquareRoot in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service infinite loop via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853...
CVE-2023-50980
CVE-2023-50980 affects Crypto++ (gf2n.cpp) up to version 8.9.0. The vulnerability allows a DoS (application crash) via DER-encoded public-key data for an F(2^m) curve when the polynomial term degrees are not strictly decreasing. Multiple advisories (OpenSUSE, SUSE, Astra Linux, Nessus references)...
CVE-2023-50980
gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...
CVE-2023-50981: Loop with Unreachable Exit Condition
ModularSquareRoot in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service infinite loop via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853...
PT-2023-31719
Name of the Vulnerable Software and Affected Versions Crypto++ cryptopp versions prior to 8.9.0 Description The issue allows attackers to cause a denial of service, specifically an infinite loop, through crafted DER public-key data associated with squared odd numbers. This can be achieved with...
CVE-2023-50980
gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...
CVE-2023-50980
gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...
Crypto++ Security Vulnerability
Crypto++ is a C++ cryptographic method library. A security vulnerability exists in Crypto++ version 8.9.0 that originates from a segmentation error when parsing a DER public key file. An attacker exploiting this vulnerability could create an incorrectly formatted DER public key file, and any user...
CVE-2023-50980
gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...
CVE-2023-50981
ModularSquareRoot in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service infinite loop via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853...
CVE-2023-50981
ModularSquareRoot in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service infinite loop via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853...
PT-2023-8249
Name of the Vulnerable Software and Affected Versions Crypto++ versions through 8.9.0 Description The issue is related to errors in resource management in the Crypto++ library, specifically in the gf2n.cpp file. It allows attackers to cause a denial of service, resulting in an application crash,...
der-zeltplatz-am-buchweiher.de Improper Access Control vulnerability OBB-3816299
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...