5484 matches found
CVE-2024-7341 vulnerabilities
Vulnerabilities for packages: keycloak-fips...
CVE-2024-45296 vulnerabilities
Vulnerabilities for packages: arangodb, kubeflow-centraldashboard, thingsboard, argo-workflows, opensearch-dashboards, opensearch-dashboards-fips, kubeflow-pipelines, sqlpad...
CVE-2024-34158 vulnerabilities
Vulnerabilities for packages: victoriametrics-operator-fips, helm-fips, nri-consul, kubebuilder, kubernetes-csi-driver-hostpath, protoc-gen-go-grpc, goreleaser, kubernetes-dashboard, prometheus-alertmanager, policy-controller, grype, policy-controller-fips, prometheus-statsd-exporter,...
CVE-2024-34156 vulnerabilities
Vulnerabilities for packages: victoriametrics-operator-fips, helm-fips, nri-consul, kubebuilder, kubernetes-csi-driver-hostpath, protoc-gen-go-grpc, goreleaser, kubernetes-dashboard, prometheus-alertmanager, policy-controller, grype, policy-controller-fips, prometheus-statsd-exporter,...
openSUSE Security Advisory (SUSE-SU-2024:3106-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-45395 vulnerabilities
Vulnerabilities for packages: slsa-verifier, gh, cosign-fips, cosign...
GHSA-CQ38-JH5F-37MQ vulnerabilities
Vulnerabilities for packages: slsa-verifier, gh, cosign-fips, cosign...
SUSE SLED15: libopenssl-3-devel / libopenssl-3-devel-32bit / etc (SUSE-SU-2024:3106-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3106-1 advisory. - CVE-2024-6119: Fixed denial of service in X.509 name checks bsc1229465 Other fixes: - FIPS: Deny SHA-1...
AZL-78570 CVE-2024-6119 affecting package openssl-fips-provider 3.1.2-1
Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...
CVE-2024-6119 Possible denial of service in X.509 name checks
Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...
CVE-2024-6119 Possible denial of service in X.509 name checks
Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...
CVE-2024-6119
Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...
CVE-2024-6119
OpenSSL CVE-2024-6119 causes a denial of service when applications perform certificate name checks (e.g., TLS server name validation). The issue stems from reading an invalid memory address during name comparison (e.g., otherName in X.509) and may terminate the process. Multiple connected advisor...
CVE-2024-6119
Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...
SUSE-SU-2024:3106-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-6119: Fixed denial of service in X.509 name checks bsc1229465 Other fixes: - FIPS: Deny SHA-1 signature verification in FIPS provider bsc1221365. - FIPS: RSA keygen PCT requirements. - FIPS: Check that the fips provider is available...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2334)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Vulnerability in OpenSSL - Possible denial of service in X.509 name checks
Issue summary : Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary : Abnormal termination of an application can a cause a denial o...
EulerOS Virtualization 2.12.0 : openssl (EulerOS-SA-2024-2334)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impac...
EulerOS Virtualization 2.12.1 : openssl (EulerOS-SA-2024-2314)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impac...