Oracle Linux 8 : openssl (ELSA-2021-1024)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1024 advisory. - CVE-2021-3450 openssl: CA certificate check bypass with X509VFLAGX509STRICT Tenable has extracted the preceding description block directly from the...

CVE-2021-27343

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...

Buffer overflow

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...

CVE-2021-27343

CVE-2021-27343 affects SerenityOS (unstructured “Unspecified” entry) in the Crypto::der_decode_sequence() function under /Userland/Libraries/LibCrypto/ASN1/DER.h. The vulnerability is a buffer overflow triggered during RSA key ASN.1 parsing, enabling potential leakage of sensitive information (co...

CVE-2021-27343

SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information context-dependent. The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::derdecodesequence function. The attack vector is: Parsing RSA Key ASN.1...

Vulnerability in OpenSSL - CA certificate check bypass with X509_V_FLAG_X509_STRICT

The X509VFLAGX509STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an...

USN-4827-1 libcrypto++ vulnerability

It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information...

USN-4827-1: Crypto++ vulnerability

It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information...

Amazon Linux 2 : openssl11 (ALAS-2020-1456)

The version of openssl11 installed on the remote host is prior to 1.1.1c-15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2020-1456 advisory. In situations where an attacker receives automated notification of the success or failure of a decryption attempt an...

ClearPass Policy Manager Unauthenticated Remote Command Execution

!/usr/bin/env bash ClearPass Policy Manager Unauthenticated Remote Command Execution in the WebUI CVE-2020-7115 For best results use OpenSSL/libcrypto shipped with RHEL/CentOS 7.x. Questions? Contact [email protected]. if "$" -ne 4 ; then echo "Usage: basename $0 remote host remote port...

[SECURITY] Fedora 31 Update: libssh-0.9.4-2.fc31

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, tra nsfer files, use a secure and transparent tunnel for your remote...

Citrix Workspace App for Linux – Session failed to launch on CentOS8.x and Fedora 29-31

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The session launch using CWA Linux in distributions like Centos 8.x and Fedora 29-31 will fail with...

[SECURITY] Fedora 30 Update: libssh-0.9.3-1.fc30

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, tra nsfer files, use a secure and transparent tunnel for your remote...

[SECURITY] Fedora 31 Update: libssh-0.9.3-1.fc31

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, tra nsfer files, use a secure and transparent tunnel for your remote...

Updated openssl packages fix security vulnerabilities

The updated packages fix security vulnerabilities: ChaCha20-Poly1305 is an AEAD cipher, and requires a unique nonce input for every encryption operation. RFC 7539 specifies that the nonce value IV should be 96 bits 12 bytes. OpenSSL allows a variable nonce length and front pads the nonce with 0...

EulerOS 2.0 SP5 : openssl110h (EulerOS-SA-2019-2218)

According to the versions of the openssl110h packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in th...

[SECURITY] [DLA 1932-1] openssl security update

Package : openssl Version : 1.0.1t-1+deb8u12 CVE ID : CVE-2019-1547 CVE-2019-1563 Two security vulnerabilities were found in OpenSSL, the Secure Sockets Layer toolkit. CVE-2019-1547 Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths...

Design/Logic Flaw

Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters instead of using a named curve. In those cases it is possible that such a group does not have...

CVE-2019-1547

Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters instead of using a named curve. In those cases it is possible that such a group does not have...

CVE-2019-1547 ECDSA remote timing attack

Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code paths. However, in some cases, it is possible to construct a group using explicit parameters instead of using a named curve. In those cases it is possible that such a group does not have...