7526 matches found
CVE-2024-6119
OpenSSL CVE-2024-6119 causes a denial of service when applications perform certificate name checks (e.g., TLS server name validation). The issue stems from reading an invalid memory address during name comparison (e.g., otherName in X.509) and may terminate the process. Multiple connected advisor...
CVE-2024-6119
Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...
SUSE-SU-2024:3106-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2024-6119: Fixed denial of service in X.509 name checks bsc1229465 Other fixes: - FIPS: Deny SHA-1 signature verification in FIPS provider bsc1221365. - FIPS: RSA keygen PCT requirements. - FIPS: Check that the fips provider is available...
EulerOS Virtualization 2.12.0 : openssl (EulerOS-SA-2024-2334)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impac...
EulerOS Virtualization 2.12.1 : openssl (EulerOS-SA-2024-2314)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impac...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2334)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Possible denial of service in X.509 name checks
Issue summary: Applications performing certificate name checks e.g., TLS clients checking server certificates may attempt to read an invalid memory address resulting in abnormal termination of the application process. Impact summary: Abnormal termination of an application can a cause a denial of...
GHSA-JJXF-26C9-77GM vulnerabilities
Vulnerabilities for packages: vault...
CVE-2024-8365 vulnerabilities
Vulnerabilities for packages: vault...
GHSA-C77R-FH37-X2PX vulnerabilities
Vulnerabilities for packages: conftest-fips, tfsec, cosign-fips, policy-controller, zarf, kubescape, cosign, policy-controller-fips, zot, kots, opa, k8sgpt, snyk-cli, spire-server-fips, spire-server, conftest...
CVE-2024-43788 vulnerabilities
Vulnerabilities for packages: arangodb, kubeflow-katib, argo-workflows...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-42229)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42229 advisory. - In the Linux kernel, the following vulnerability has been resolved: crypto: aead,cipher - zeroize key buffer...
Let’s All Agree to Use Seeds as ML-KEM Keys
Last week, NIST published the final version of the ML-KEM1 specification, FIPS 203. One change from the draft is that the final document explicitly allows storing the private decapsulation key as a seed. This is a plea to the cryptography engineering community: let’s all agree to only use seeds a...
EulerOS Virtualization 2.11.1 : openssl (EulerOS-SA-2024-2160)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Use After Free with SSLfreebuffersCVE-2024-4741 Issue summary: Some non-default TLS server configurations can cause unbounded memo...
Rocky Linux 8 : container-tools:rhel8 (RLSA-2024:5258)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5258 advisory. golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads CVE-2024-1394 golang: net/http: memory exhaustion in...
EulerOS 2.0 SP12 : openssl (EulerOS-SA-2024-2223)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An...
EulerOS Virtualization 2.11.0 : openssl (EulerOS-SA-2024-2185)
According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Use After Free with SSLfreebuffersCVE-2024-4741 Issue summary: Some non-default TLS server configurations can cause unbounded memo...
Amazon Linux 2 : openssl (ALAS-2024-2604)
The version of openssl installed on the remote host is prior to 1.0.2k-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2604 advisory. Issue summary: Calling the OpenSSL API function SSLselectnextproto with anempty supported client protocols buffer may cause a cra...