OESA-2022-1889 gnutls security update

GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

AZL-10864 CVE-2022-1615 affecting package samba 4.12.5-7

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

DEBIAN-CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

Input validation

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

UBUNTU-CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-1615

CVE-2022-1615 affects Samba: the GnuTLS function gnutls_rnd() can fail and produce predictable random values, impacting Samba components that rely on that RNG. Public references in the connected docs indicate the issue is fixed in later Samba releases (e.g., Samba 4.17.5 and related advisories) a...

Samba 安全特征问题漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. Samba suffers from a security vulnerability that stems from the fact that GnuTLS gnutlsrnd may fail and give predictable random values...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

Security update for gnutls (important)

openSUSE Security Update: Security update for gnutls Announcement ID: openSUSE-SU-2022:2882-1 Rating: important References: 1202020 Cross-References: CVE-2022-2509 CVSS scores: CVE-2022-2509 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2022-2509 SUSE: 7.5...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

CVE-2022-1615

In Samba, GnuTLS gnutlsrnd can fail and give predictable random values...

A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy providing zero-length input may cause undefined behavior. This flaw leads to a denial of service after authentication in rare circumstances.

...

CVE-2022-2509 affecting package gnutls for versions less than 3.7.7-1

CVE-2022-2509 affecting package gnutls for versions less than 3.7.7-1. An upgraded version of the package is available that resolves this issue...

ALSA-2022:6224 Moderate: openssl security and bug fix update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: crehash script allows command injection CVE-2022-1292 openssl: Signer certificate verification...

Rocky Linux 8 : gnutls and nettle (RLSA-2021:4451)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4451 advisory. - A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext. An attacker could use this flaw to provide a manipulated...

Vulnerability fixed in GnuTLS

A vulnerability has been fixed in GnuTLS. An unauthenticated remote malicious party could potentially exploit the vulnerability to cause a denial-of-service or execute arbitrary code execute with the application's privileges. The vulnerability was found in the PKCS 7 authentication code. In doing...