IPWorks SSH Security Vulnerability

IPWorks SSH is a library from nsoftware that integrates SSH Secure Shell security features, allowing developers to easily integrate SSH security into Internet applications. A security vulnerability exists in IPWorks SSH that stems from the possibility of being induced to issue unintended file...

Deserialization of Untrusted Data affecting org.apache.sshd:sshd-common package (CVE-2022-45047)

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD = 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys ...

OESA-2022-2119 apache-sshd security update

Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. Security Fixes: Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD = 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The...

Denial of Service Vulnerability in Multiple Huawei Products (CNVD-2018-00320)

Huawei DP300, RP200, and TE30/40/50/60 are Huawei's all-in-one desktop products and high-definition videoconferencing terminals for high-end customers. A denial of service vulnerability exists in several Huawei products due to insufficient parameter checking when loading the putty comment key. A...

SUSE-RU-2015:1412-1 Recommended update for openssl1

This openssl update fixes a regression caused by the patch for CVE-2015-0287, which could cause DSA keys not be correctly loaded from disk. bsc937492...

SUSE-SU-2015:1410-1 Recommended update for openssl

This update of openssl fixes two regressions. - A regression was caused by the security fix for CVE-2015-0287, where DSA keys were not correctly loaded from file anymore. bsc937492 - RSA key generation odd keylengths was entering an endless loop bsc937212...