2100 matches found
CVE-2025-31719
In TEE EcDSA algorithm, there is a possible memory consistency issue. This could lead to generated incorrect signature results with low probability...
CVE-2025-31719
In TEE EcDSA algorithm, there is a possible memory consistency issue. This could lead to generated incorrect signature results with low probability...
PT-2025-46222
Name of the Vulnerable Software and Affected Versions TEE affected versions not specified Description A memory consistency issue exists within the TEE EcDSA algorithm. This issue may result in the generation of incorrect signature results, though the probability of this occurring is low...
F5 BIG-IP SSL/TLS Denial of Service Vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, and remote access policy management. A denial of service vulnerability exists in the SSL/TLS module of BIG-IP. The vulnerability arises because when the...
CVE-2025-60016
When Diffie-Hellman DH group Elliptic Curve Cryptography ECC Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions...
AEX-NStep: Probabilistic Interrupt Counting Attacks on Intel SGX
To mitigate interrupt-based stepping attacks notably using SGX-Step, Intel introduced AEX-Notify, an ISA extension to Intel SGX that aims to prevent deterministic single-stepping. In this work, we introduce AEX-NStep, the first interrupt counting attack on AEX-Notify-enabled Enclaves. We show tha...
gnark-crypto doesn't range check input values during ECDSA and EdDSA signature deserialization
Impact During deserialization of ECDSA and EdDSA signatures gnark-crypto did not check that the values are in the range 1, n-1 with n being the corresponding modulus either base field modulus in case of R in EdDSA, and scalar field modulus in case of s,r in ECDSA and s in EdDSA. As this also...
EUVD-2025-34686
gnark-crypto doesn't range check input values during ECDSA and EdDSA signature deserialization...
CVE-2025-60016
When Diffie-Hellman DH group Elliptic Curve Cryptography ECC Brainpool curves are configured in an SSL profile's Cipher Rule or Cipher Group, and that profile is applied to a virtual server, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions...
F5 Networks BIG-IP : BIG-IP SSL/TLS vulnerability (K000139514)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000139514 advisory. When Diffie-Hellman DH group Elliptic Curve Cryptography ECC Brainpool curves are configured in an SSL profile's Cipher Rule o...
Duplicate
This advisory duplicates another...
CLSA-2025-1760023353 openssl: Fix of 2 CVEs
CVE-2019-1547: fix side-channel vulnerability in ECDSA when using explicit EC parameters without cofactor - CVE-2025-9230: fix incorrect check of unwrapped key size...
CLSA-2025-1760023124 openssl: Fix of 2 CVEs
CVE-2019-1547: fix side-channel vulnerability in ECDSA when using explicit EC parameters without cofactor - CVE-2025-9230: fix incorrect check of unwrapped key size...
CLSA-2025-1759865335 openssl: Fix of CVE-2024-13176
CVE-2024-13176: fix timing side-channel in ECDSA signature computation vulnerability...
EUVD-2021-1641
Malware in sbrugna...
EUVD-2015-0246
Malware in sbrugna...
EUVD-2020-17774
Malware in sbrugna...
EUVD-2007-6711
Malware in sbrugna...