47 matches found
Scientific Linux Security Update : java-1.7.0-openjdk on SL5.x i386/x86_64 (20140716)
It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions. CVE-2014-4216, CVE-2014-4219 A format string flaw was discovered in the Hotspo...
Null pointer dereference
The publickeyfromprivatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a "Client: Diffie-Hellman Key Exchange Init" packet...
CVE-2013-0176
The publickeyfromprivatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a "Client: Diffie-Hellman Key Exchange Init" packet...
CVE-2013-0176: Undefined Security Weakness
The publickeyfromprivatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service NULL pointer dereference and crash via a "Client: Diffie-Hellman Key Exchange Init" packet...
PT-2013-2147
Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.5.4 Description The issue allows remote attackers to cause a denial of service, resulting in a crash due to a NULL pointer dereference. This occurs when no algorithm is matched during negotiations and a specific...
PT-2012-1170
Name of the Vulnerable Software and Affected Versions PolarSSL versions prior to 1.3.0 PolarSSL versions prior to 0.14.2 Description The issue concerns the Diffie-Hellman key-exchange implementation in PolarSSL, which does not properly validate a public parameter. This makes it easier for...
