5484 matches found
CVE-2024-8365 vulnerabilities
Vulnerabilities for packages: vault...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: spire-server, cosign-fips, opa, zot, policy-controller-fips, tfsec, conftest-fips, kubescape, policy-controller, zarf, snyk-cli, kots, conftest, k8sgpt, cosign, spire-server-fips...
CVE-2024-43788 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-42229)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42229 advisory. - In the Linux kernel, the following vulnerability has been resolved: crypto: aead,cipher - zeroize key buffer...
Let’s All Agree to Use Seeds as ML-KEM Keys
Last week, NIST published the final version of the ML-KEM1 specification, FIPS 203. One change from the draft is that the final document explicitly allows storing the private decapsulation key as a seed. This is a plea to the cryptography engineering community: let’s all agree to only use seeds a...
EulerOS Virtualization 2.11.1 : openssl (EulerOS-SA-2024-2160)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Use After Free with SSLfreebuffersCVE-2024-4741 Issue summary: Some non-default TLS server configurations can cause unbounded memo...
Rocky Linux 8 : container-tools:rhel8 (RLSA-2024:5258)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5258 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 golang: net/http: memory exhaustion in...
EulerOS Virtualization 2.11.0 : openssl (EulerOS-SA-2024-2185)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Use After Free with SSLfreebuffersCVE-2024-4741 Issue summary: Some non-default TLS server configurations can cause unbounded memo...
EulerOS 2.0 SP12 : openssl (EulerOS-SA-2024-2223)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An...
Amazon Linux 2 : openssl (ALAS-2024-2604)
The version of openssl installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2604 advisory. Issue summary: Calling the OpenSSL API function SSLselectnextproto with anempty supported client protocols buffer may cause a cra...
GHSA-VWF8-Q6FW-4WCM vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui, cilium-cli, cilium, cilium-fips, hubble-ui-backend-fips, hubble-fips...
GHSA-QCM3-7879-XCWW vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui, cilium-cli, cilium, cilium-fips, hubble-ui-backend-fips, hubble-fips...
GHSA-Q7W8-72MR-VPGW vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, cilium, cilium-fips, hubble-ui-backend-fips...
CVE-2024-42488 vulnerabilities
Vulnerabilities for packages: hubble-ui, hubble, cilium, cilium-fips, hubble-ui-backend-fips...
CVE-2024-42487 vulnerabilities
Vulnerabilities for packages: hubble, hubble-ui, cilium-cli, cilium, cilium-fips, hubble-ui-backend-fips, hubble-fips...
NIST Releases First Post-Quantum Encryption Algorithms
From the Federal Register: After three rounds of evaluation and analysis, NIST selected four algorithms it will standardize as a result of the PQC Standardization Process. The public-key encapsulation mechanism selected was CRYSTALS-KYBER, along with three digital signature schemes:...
Medium: openssl
Issue Overview: Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVPPKEYparamcheck or EVPPKEYpubliccheck to check a DSA public key or DSA parameters may experience long delays. Where the key or parameters that ar...
Medium: openssl
Issue Overview: Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVPPKEYparamcheck or EVPPKEYpubliccheck to check a DSA public key or DSA parameters may experience long delays. Where the key or parameters that ar...