Lucene search
+L

1513 matches found

UbuntuCve
UbuntuCve
•added 2021/08/23 2:15 a.m.•45 views

CVE-2020-36475

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. The calculations performed by mbedtlsmpiexpmod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs...

7.5CVSS7.1AI score0.01917EPSS
SaveExploits0References4
Prion
Prion
•added 2021/08/23 2:15 a.m.•30 views

Design/Logic Flaw

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. The calculations performed by mbedtlsmpiexpmod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs...

5CVSS7.2AI score0.01917EPSS
SaveExploits0References6Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/23 12:00 a.m.•10 views

CVE-2020-36475: Incorrect Calculation of Buffer Size

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. The calculations performed by mbedtlsmpiexpmod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs...

7.5CVSS5.8AI score0.01917EPSS
SaveExploits0References2
CVE
CVE
•added 2021/08/23 12:00 a.m.•123 views

CVE-2020-36475

The CVE-2020-36475 issue affects Mbed TLS prior to 2.25.0 (and <2.16.9 LTS,

7.5CVSS7.1AI score0.01917EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2021/08/23 12:00 a.m.•77 views

CVE-2020-36475

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. The calculations performed by mbedtlsmpiexpmod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs...

7.5CVSS7.3AI score0.01917EPSS
SaveExploits0
Mend
Mend
•added 2021/08/23 12:00 a.m.•5 views

CVE-2020-36475

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. The calculations performed by mbedtlsmpiexpmod are not limited; thus, supplying overly large parameters could lead to denial of service when generating Diffie-Hellman key pairs...

8.7CVSS0.01917EPSS
SaveExploits0References7
NVD
NVD
•added 2021/07/19 5:15 p.m.•22 views

CVE-2020-36424

An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key for RSA or static Diffie-Hellman via a side-channel attack against generation of base blinding/unblinding values...

4.7CVSS0.0035EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2021/07/19 5:15 p.m.•30 views

CVE-2020-36424

An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key for RSA or static Diffie-Hellman via a side-channel attack against generation of base blinding/unblinding values...

4.7CVSS6.6AI score
SaveExploits0References6
osv_debian
osv_debian
•added 2021/07/19 5:15 p.m.•5 views

DEBIAN-CVE-2020-36424

An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key for RSA or static Diffie-Hellman via a side-channel attack against generation of base blinding/unblinding values...

4.7CVSS5.4AI score0.0035EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2021/07/19 5:15 p.m.•13 views

UBUNTU-CVE-2020-36424

An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key for RSA or static Diffie-Hellman via a side-channel attack against generation of base blinding/unblinding values...

4.7CVSS7.1AI score0.0035EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/19 12:00 a.m.•8 views

CVE-2020-36424: Observable Discrepancy

An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key for RSA or static Diffie-Hellman via a side-channel attack against generation of base blinding/unblinding values...

4.7CVSS5.7AI score0.0035EPSS
SaveExploits0References2
Mend
Mend
•added 2021/07/19 12:00 a.m.•6 views

CVE-2020-36424

An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key for RSA or static Diffie-Hellman via a side-channel attack against generation of base blinding/unblinding values...

5.7CVSS0.0035EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2021/07/19 12:00 a.m.•48 views

CVE-2020-36424

An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key for RSA or static Diffie-Hellman via a side-channel attack against generation of base blinding/unblinding values...

6.6AI score0.0035EPSS
SaveExploits0References6
IBM Security Bulletins
IBM Security Bulletins
•added 2021/07/08 9:30 p.m.•50 views

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM InfoSphere Optim Performance Manager (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM InfoSphere Optim Performance Manager Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the...

4.3CVSS6.4AI score0.9986EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/06/25 4:46 p.m.•77 views

Security Bulletin: Vulnerabilities in OpenSSL including Logjam affect IBM GPFS V3.5 for Windows (CVE-2015-4000, CVE-2015-1793, CVE-2014-8176, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792)

Summary OpenSSL vulnerabilities were disclosed by the OpenSSL Project and affect IBM GPFS V3.5 . This includes the Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol CVE-2015-4000. This also includes the alternate chains certificate forgery vulnerability...

7.5CVSS6.9AI score0.9986EPSS
SaveExploits9Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2021/06/25 4:46 p.m.•159 views

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM GPFS for Windows (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM GPFS for Windows V3.5 Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properl...

4.3CVSS6.4AI score0.9986EPSS
SaveExploits1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/15 12:00 a.m.•16 views

OpenSSL AVX2 Montgomery Unauthorized Access

The vulnerability of the AVX2 Montgomery procedure in the OpenSSL library is related to deficiencies in data protection. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the secret key DH1024...

5.9CVSS6.3AI score0.13411EPSS
SaveExploits0References29Affected Software29
Tenable Nessus
Tenable Nessus
•added 2021/06/10 12:00 a.m.•58 views

SUSE SLES11 Security Update : openssl1 (SUSE-SU-2020:14511-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2020:14511-1 advisory. - The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections...

4.3CVSS6.3AI score0.04903EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2021/06/10 12:00 a.m.•58 views

SUSE SLES11 Security Update : openssl (SUSE-SU-2020:14491-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2020:14491-1 advisory. - The Raccoon attack exploits a flaw in the TLS specification which can lead to an attacker being able to compute the pre-master secret in connections...

4.3CVSS6.3AI score0.04903EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•118 views

SUSE: Security Advisory (SUSE-SU-2017:1175-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.3AI score0.18178EPSS
SaveExploits22References9
Rows per page
Query Builder