16721 matches found
AZL-94196 CVE-2026-55953 affecting package erlang for versions less than 26.2.5.21-4
The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...
CVE-2026-55953
The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...
CVE-2026-64531
creationtimestamp| type| source ---|---|--- 2026-07-27 08:12:20+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116990931091139348 2026-07-28 10:33:40+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrp7jnvcfc2l 2026-07-28 11:12:13+00:00| seen|...
CVE-2026-64535
creationtimestamp| type| source ---|---|--- 2026-07-27 07:58:46+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116990877756245941 2026-08-06 05:16:01+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
CVE-2026-14837
creationtimestamp| type| source ---|---|--- 2026-07-27 07:01:07+00:00| seen| https://infosec.exchange/users/certvde/statuses/116990651071081703...
librenswan: IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload
A flaw was found in Libreswan's implementation of IKEv1 authentication via raw RSA signatures. When processing an IKEv1 packet using PKCS 1 v1.5 RSA encryption, the RSAauthenticatehashsignaturerawrsa function fails to properly validate the length of the authentication hash. A remote,...
librenswan: IKEv2 Denial of Service via malformed fragmentation
A flaw was found in Libreswan's IKEv2 fragment reassembly mechanism. When a VPN gateway processes incoming split network packets fragments containing unexpected data, an off-by-one boundary validation error triggers an internal program safety check assertion failure. A remote, unauthenticated...
librenswan: IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload
A flaw was found in Libreswan's implementation of IKEv2 authentication when processing signatures utilizing the RSASSA-PKCS1-v15 scheme. The RSAauthenticatehashsignaturepkcs115rsa function does not correctly validate the DER encoding of the ASN.1 digest. A remote, unauthenticated attacker could...
ALSA-2026:46398 Important: libreswan security update
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...
Important: libreswan security update
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...
PT-2026-64988
Name of the Vulnerable Software and Affected Versions Erlang/OTP versions 17.0 through 27.3.4.14 Erlang/OTP versions 28.0 through 28.5.0.3 Erlang/OTP versions 29.0 through 29.0.3 ssl versions 5.3.4 through 11.2.12.10 ssl versions 11.6.0 through 11.6.0.3 ssl versions 11.7.0 through 11.7.3...
ALSA-2026:46397 Important: libreswan security update
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...
RHEL 9 : libreswan (RHSA-2026:46986)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:46986 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...
Important: libreswan security update
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...
ALSA-2026:46396 Important: libreswan security update
Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks such as virtual private network VPN...
CVE-2026-64530
creationtimestamp| type| source ---|---|--- 2026-07-26 17:42:00+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987508848390063 2026-07-27 06:26:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrmba2jhs524 2026-08-03 10:15:38+00:00| seen|...
CVE-2026-64520
creationtimestamp| type| source ---|---|--- 2026-07-26 17:28:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116987456179389325 2026-07-27 11:00:52+00:00| seen| https://infosec.exchange/users/dragonjar/statuses/116991593814246930...
CVE-2026-17458
creationtimestamp| type| source ---|---|--- 2026-07-26 12:00:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116986165685626877 2026-07-26 12:00:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrkdgz7ndm2i 2026-07-26 17:27:08+00:00| seen|...
CVE-2026-17459
creationtimestamp| type| source ---|---|--- 2026-07-26 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116985811828078268 2026-07-26 10:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mrk6g3xnyj2n 2026-07-26 17:25:36+00:00| seen|...