envoy: Incorrect configuration handling allows mTLS session re-use without re-validation

A flaw was found in envoy. When certificate validation settings are changed, incorrect configuration handling allows TLS session reuse without revalidation...

The vulnerability of TLS and SSL Mbed TLS implementations lies in the exposure of information due to incompatibilities, allowing attackers to gain access to confidential data.

The vulnerability of TLS and SSL Mbed TLS implementations is related to the disclosure of information due to incompatibility. Exploiting this vulnerability allows an attacker to gain access to confidential data...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in video/SDLpixels.c in SDL Simple DirectMedia Layer. Using a crafted malicious .BMP file, an attacker can cause the application using this library to crash and potentially execute arbitrary code. Remediation...

ALPACA is an application layer protocol content confusion attack exploiting TLS servers implementing different protocols but using compatible certificates such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

...

CVE-2021-33657

There is a heap overflow problem in video/SDLpixels.c in SDL Simple DirectMedia Layer 2.x to 2.0.18 versions. By crafting a malicious .BMP file, an attacker can cause the application using this library to crash, denial of service or Code execution...

The vulnerability of the mbedtls_mpi_exp_mod function in implementations of TLS and SSL protocols allows a attacker to cause a service failure.

The vulnerability of the mbedtlsmpiexpmod function in TLS and SSL protocol implementations is related to the lack of data size limitations during calculations. Exploiting this vulnerability allows a remote attacker to cause service failures...

CVE-2021-33657

CVE-2021-33657 (SDL2) affects SDL2 up to version 2.0.18, with a heap overflow in video/SDL_pixels.c when processing a crafted BMP file. This can crash the application, cause denial of service, or lead to code execution. Exploitation is described via malformed BMP input; several advisories note pa...

Simple DirectMedia Layer 缓冲区错误漏洞

Simple DirectMedia Layer SDL is a multi-platform library for accessing low-level hardware and graphics and providing support for games, software and emulators. A security vulnerability exists in Simple DirectMedia Layer versions 2.x through 2.0.18, which stems from a heap overflow in...

PT-2022-3227 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver affected versions not specified Description: The issue is related to an out-of-bounds write in the ECC layer of the NVIDIA GPU Display Driver, which can be exploited by an unprivileged regular user. This may lead to...

CVE-2022-0123

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab does not validate SSL certificates for some of external CI services which makes it possible to perform MitM attacks on connections to these external services...

[SECURITY] Fedora 36 Update: cyrus-sasl-2.1.27-18.fc36

The cyrus-sasl package contains the Cyrus implementation of SASL. SASL is the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols...

PT-2022-18707 · Tcpreplay +2 · Tcpreplay +2

Name of the Vulnerable Software and Affected Versions: Tcpreplay version 4.4.1 Description: The issue is related to a reachable assertion in the get layer4 v6 function located in common/get.c. This assertion is reachable in tcprewrite, a component of Tcpreplay. Recommendations: For Tcpreplay...

Friday Squid Blogging: Unexpectedly Low Squid Population in the Arctic

Research: Abstract: The retreating ice cover of the Central Arctic Ocean CAO fuels speculations on future fisheries. However, very little is known about the existence of harvestable fish stocks in this 3.3 million­–square kilometer ecosystem around the North Pole. Crossing the Eurasian Basin, we...

CVE-2021-3422

The lack of validation of a key-value field in the Splunk-to-Splunk protocol results in a denial-of-service in Splunk Enterprise instances configured to index Universal Forwarder traffic. The vulnerability impacts Splunk Enterprise versions before 7.3.9, 8.0 versions before 8.0.9, and 8.1 version...

North Korean state-sponsored threat actor Lazarus Group exploiting Chrome Zero-day vulnerability

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here For more than a month before a fix was available, North Korean state hackers known as Lazarus group exploited a zero-day, remote code execution vulnerability CVE-2022-0609 in Google Chromes web browser. The attack mainly targe...

golang: crypto/tls: certificate of wrong type is causing TLS client to panic

A flaw was found in golang. A panic can be triggered by an attacker in a privileged network position without access to the server certificate's private key, as long as a trusted ECDSA or Ed25519 certificate for the server exists or can be issued, or the client is configured with...

OWASP Zed Attack Proxy 信任管理问题漏洞

OWASP Zed Attack Proxy ZAP is an open source web application security scanner from the OWASP Foundation in the United States. It is intended for use by people new to application security as well as professional penetration testers. A trust management issue vulnerability exists in the w2022-03-21...

CVE-2021-3618

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic fr...

AZL-9220 CVE-2021-3618 affecting package sendmail 8.15.2-46

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic fr...

AZL-9188 CVE-2021-3618 affecting package nginx for versions less than 1.20.2-2

ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic fr...