Lucene search
+L

48 matches found

RedHat Linux
RedHat Linux
added 2013/03/04 9:5 p.m.5 views

openssl: DoS due to improper handling of OCSP response verification

OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service NULL pointer dereference and application crash via an invalid key...

5CVSS7AI score0.1965EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2013/02/14 12:0 a.m.44 views

Debian DSA-2621-1 : openssl - several vulnerabilities

Multiple vulnerabilities have been found in OpenSSL. The Common Vulnerabilities and Exposures project identifies the following issues : - CVE-2013-0166 OpenSSL does not properly perform signature verification for OCSP responses, which allows remote attackers to cause a denial of service via an...

5CVSS6.3AI score0.35584EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2013/02/13 12:0 a.m.39 views

Debian Security Advisory DSA 2621-1 (openssl - several vulnerabilities)

Multiple vulnerabilities have been found in OpenSSL. The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2013-0166 OpenSSL does not properly perform signature verification for OCSP responses, which allows remote attackers to cause a denial of service via an inval...

5CVSS0.2AI score0.35584EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2013/02/08 7:55 p.m.2 views

CVE-2013-0166

OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service NULL pointer dereference and application crash via an invalid key...

5CVSS5.6AI score0.1965EPSS
SaveExploits0References34
OSV
OSV
added 2013/02/08 7:55 p.m.3 views

DEBIAN-CVE-2013-0166

OpenSSL before 0.9.8y, 1.0.0 before 1.0.0k, and 1.0.1 before 1.0.1d does not properly perform signature verification for OCSP responses, which allows remote OCSP servers to cause a denial of service NULL pointer dereference and application crash via an invalid key...

5CVSS9.2AI score0.1965EPSS
SaveExploits0References1
securityvulns
securityvulns
added 2012/09/18 12:0 a.m.24 views

GnuPG key spoofing

Invalid key id usage with a key server...

1.9AI score
SaveExploits0References1Affected Software1
RedHat Linux
RedHat Linux
added 2011/10/05 8:12 p.m.9 views

openswan: IKE invalid key length allows remote unauthenticated user to crash openswan

Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service NULL pointer dereference and pluto IKE daemon crash via an ISAKMP message with an invalid KEYLENGTH attribute, which is not properly handled by the error handling function...

5CVSS5.9AI score0.02273EPSS
SaveExploits0References5
securityvulns
securityvulns
added 2001/09/05 12:0 a.m.43 views

Проблемы с отображением недействительных ключей в PGP

Если в ключ с подписаным USERID добавить второй USERID он будет отображаться как подписаный...

0.3AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder