OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage

A flaw was found in OpenSSH. This vulnerability allows the system to use unintended Elliptic Curve Digital Signature Algorithm ECDSA algorithms. This occurs because the configuration for accepted public key algorithms is misinterpreted, leading to the use of weaker cryptographic methods than...

SUSE CVE-2022-38177

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources...

The vulnerability of the Cisco Unified Communications Manager software allows a malicious individual to obtain a one-time code (nonce) for an ECDSA encryption algorithm.

The vulnerability exists in the implementation of the Montgomery algorithm in OpenSSL, due to the temporal impermanence of the operations involved in padding. Exploiting this vulnerability allows local users to obtain a one-time code nonce for ECDSA by attacking the cache through external channel...