Lucene search
K

7 matches found

Vulnrichment
Vulnrichment
added 2026/05/22 2:31 a.m.4 views

CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

5.8AI score0.00035EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/07/14 12:0 a.m.1 views

py-libp2p 安全漏洞

py-libp2p is a Python implementation of the libp2p network stack from the libp2p open source. A security vulnerability exists in py-libp2p versions prior to 0.2.3, which stems from the use of a large RSA key by a peer that could lead to a denial of service...

4.3CVSS6.3AI score0.00281EPSS
Exploits0References4
SUSE Linux
SUSE Linux
added 2025/05/19 4:49 a.m.1 views

Security update for openssh

This update for openssh fixes the following issues: Security issues fixed: CVE-2025-32728: Fixed a logic error in DisableForwarding option bsc1241012 Other bugs fixed: Allow KEX hashes greater than 256 bits bsc1241045 Fixed hostname being left out of the audit output bsc1228634 Fixed failures wit...

5.1CVSS5.8AI score0.0022EPSS
Exploits0References10
Amazon
Amazon
added 2023/08/21 12:0 a.m.2 views

Medium: runc

Issue Overview: 2023-10-11: The severity level was changed from Important to Medium. Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to = 8192...

5.3CVSS7.2AI score0.00122EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 6:5 a.m.2 views

SUSE CVE-2009-0544

Buffer overflow in the PyCrypto ARC2 module 2.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large ARC2 key length...

10CVSS8.1AI score0.29776EPSS
Exploits2References4
RedhatCVE
RedhatCVE
added 2021/12/22 2:7 p.m.37 views

CVE-2021-45042

A denial of service attack was discovered against vault. For clusters using the Integrated Storage Raft backend, an authenticated user with write permissions to the KV secrets engine can cause a panic leading to a denial of service of the storage backend, by supplying a key larger than 32KB...

6.8CVSS4.3AI score0.00435EPSS
Exploits0References4
OSV
OSV
added 2018/11/29 11:29 p.m.1 views

UBUNTU-CVE-2018-19497

In The Sleuth Kit TSK through 4.6.4, hfscattraverse in tsk/fs/hfs.c does not properly determine when a key length is too large, which allows attackers to cause a denial of service SEGV on unknown address with READ memory access in a tskgetu16 call in hfsdiropenmetacb in tsk/fs/hfsdent.c...

6.5CVSS7.2AI score0.03207EPSS
Exploits0References3
Rows per page
Query Builder