5484 matches found
K000149306: OpenSSL vulnerability CVE-2024-4603
Security Advisory Description Issue summary: Checking excessively long DSA keys or parameters may be very slow. Impact summary: Applications that use the functions EVPPKEYparamcheck or EVPPKEYpubliccheck to check a DSA public key or DSA parameters may experience long delays. Where the key or...
CVE-2024-56323 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
CVE-2024-13041 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...
CVE-2024-6324 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...
CBL Mariner 2.0 Security Update: golang / msft-golang (CVE-2024-9355)
The version of golang / msft-golang installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-9355 advisory. - A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly...
CVE-2024-12431 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...
CVE-2025-0194 vulnerabilities
Vulnerabilities for packages: gitlab-runner-fips, gitlab-cng-fips...
nss bug fix and enhancement update
An update is available for nss. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...
openSUSE Security Advisory (SUSE-SU-2025:0005-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-45548
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...
CVE-2024-45546
Memory corruption while processing FIPS encryption or decryption IOCTL call invoked from user-space...
CVE-2024-45547
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality...
CVE-2024-45548 Buffer Over-read in WLAN Windows Host
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...
CVE-2024-45548 Buffer Over-read in WLAN Windows Host
Memory corruption while processing FIPS encryption or decryption validation functionality IOCTL call...
CVE-2024-45548
CVE-2024-45548 relates to memory corruption in Qualcomm chipsets during the processing of the FIPS encryption/decryption validation IOCTL. The issue affects the IOCTL handling path used for FIPS validation and is described as memory corruption with high impact (confidentiality, integrity, and ava...
CVE-2024-45547 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality...
CVE-2024-45547 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Windows Host
Memory corruption while processing IOCTL call invoked from user-space to verify non extension FIPS encryption and decryption functionality...
CVE-2024-45547
CVE-2024-45547 concerns memory corruption in Qualcomm chipsets triggered while processing an IOCTL from user-space to verify non-extension FIPS encryption/decryption. The CVE details indicate a local, low-privilege attack with no user interaction, but with high impact on confidentiality, integrit...
CVE-2024-45546
CVE-2024-45546 — Qualcomm chipset memory corruption occurs when processing FIPS encryption/decryption IOCTLs from user-space. Affected component is not explicitly enumerated beyond ‘Qualcomm chipsets’; root cause cited as memory corruption. Exploitation status is not provided in the supplied docu...