4118 matches found
SUSE CVE-2024-56128
Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation. Issue Summary: Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism SCRAM did not fully adhere to the requirements of RFC 5802 1. Specifically, as per RFC 5802, the serv...
GHSA-P7C9-8XX8-H74F Apache Kafka's SCRAM implementation Incorrectly Implements Authentication Algorithm
Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation. Issue Summary: Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism SCRAM did not fully adhere to the requirements of RFC 5802 1. Specifically, as per RFC 5802, the serv...
cpython: python: Memory race condition in ssl.SSLContext certificate store methods
A vulnerability was found in Python. A defect was discovered in the Python “ssl” module where there is a memory race condition with the ssl.SSLContext methods “certstorestats” and “getcacerts”. The race condition can be triggered if the methods are called at the same time that certificates are...
Improper (D)TLS key boundary enforcement
...
CVE-2024-5288
...
CVE-2024-5814
...
The vulnerability of the TLS processing function in Cisco Firepower Threat Defense’s microprogramming system allows a attacker to induce a service failure.
The vulnerability of the TLS processing function in Cisco Firepower Threat Defense’s microprogramming network interfaces is related to the use of the NULL pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an incorrect page reference count in the kTLS transport handling code in the net/mlx5e driver, which could...
The vulnerability of the implementation of the mTLS protocol in the Keycloak software for managing identity and access control allows a perpetrator to circumvent security restrictions and gain unauthorized access to protected information.
The vulnerability of the mTLS protocol implementation in the Keycloak identity and access management software is related to a certificate authentication error. Exploiting this vulnerability could allow an attacker to circumvent security restrictions and gain unauthorized access to protected...
Vulnerabilities of components of Linux operating system’s kernel/tls modules, allowing attackers to cause service interruptions
The vulnerability of Linux operating system kernel’s net/tls components arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset the maximum negotiable TLS version is mishandled.
...
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.
...
The vulnerability in the implementation of TLS and SSL protocols in Cisco Nexus Dashboard Orchestrator (NDO) allows a perpetrator to disclose protected information.
The vulnerability of the TLS and SSL protocol implementations in Cisco Nexus Dashboard Orchestrator NDO relates to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Astra Linux – Vulnerability in Python 3.11
A vulnerability was discovered in Python before version 3.8.18, 3.9.x before version 3.9.18, 3.10.x before version 3.10.13, and 3.11.x before version 3.11.5. This vulnerability primarily affects servers such as HTTP servers that use TLS client authentication. When a TLS server-side socket is...
SUSE CVE-2024-53091
In the Linux kernel, the following vulnerability has been resolved: bpf: Add skisinet and ISICSK check in tlsswhasctxtx/rx As the introduction of the support for vsock and unix sockets in sockmap, tlsswhasctxtx/rx cannot presume the socket passed in must be ISICSK. vsock and afunix sockets have...
The vulnerability of the set_verify_callback() function in the Icinga accessibility monitoring system allows a hacker to bypass security restrictions, gain unauthorized access to protected information, or execute arbitrary commands.
The vulnerability of the setverifycallback function in the Icinga accessibility monitoring system is related to errors in the TLS certificate validation process. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions, gain unauthorized access to protected...
Red Hat Keycloak 安全漏洞
Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak, which arises from a reverse proxy that does not use TLS delivery termination and has mTLS...
The vulnerability of the tls component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the tls component in the Linux operating system’s kernel is related to improper blocking of resources in the tlsswrecvmsg function. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2020-27124
A vulnerability in the SSL/TLS handler of Cisco Adaptive Security Appliance ASA Software could allow an unauthenticated, remote attacker to cause the affected device to reload unexpectedly, leading to a denial of service DoS condition. The vulnerability is due to improper error handling on...
Cesanta Mongoose Web Server 输入验证错误漏洞
Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C by Cesanta Ireland. An input validation error vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from the presence of an integer overflow that allows an attacker to send...