CVE-2026-31637

A flaw was found in the Linux kernel's rxrpc subsystem. A remote attacker could exploit this by sending a malformed RXKAD response ticket. This ticket, with a non-block-aligned length, would cause decryption to fail, yet the system would proceed to process attacker-controlled data. This could lea...

SUSE SLES12 Security Update : openssl (SUSE-SU-2016:2387-1)

This update for openssl fixes the following issues: OpenSSL Security Advisory 22 Sep 2016 bsc999665 Severity: High - OCSP Status Request extension unbounded memory growth CVE-2016-6304 bsc999666 Severity: Low - Pointer arithmetic undefined behaviour CVE-2016-2177 bsc982575 - Constant time flag no...

PT-2016-3387

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.1.0 Description The issue is related to the tls decrypt ticket function in ssl/t1 lib.c, which does not properly validate the ticket length, considering the HMAC size. This allows remote attackers to cause a denial ...