Vulnerability of the mbedtls_mpi_exp_mod() function in Mbed TLS software, which allows a perpetrator to disclose protected information

The vulnerability of the mbedtlsmpiexpmod function in the Mbed TLS software is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow an attacker to disclose the protected information...

DEBIAN-CVE-2021-36647

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking a...

AZL-13023 CVE-2021-36647 affecting package fluent-bit for versions less than 2.0.9-1

Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information typically an untrusted operating system attacking a...

Mbed TLS 加密问题漏洞

Mbed TLS is an open source, portable, easy to use, readable and flexible SSL library. A security vulnerability exists in Mbed TLS versions prior to 3.0.0, which stems from the use of a dangerous cryptographic algorithm in the mbedtlsmpiexpmod function of lignum.c. The vulnerability is caused by t...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: Incomplete cleanup of multi-core shared buffers aka SBDR CVE-2022-21123 Incomplete cleanup of microarchitectural fill buffers aka SBDS CVE-2022-21125 Incomplete cleanup in specific special regist...

new packages: rpm-mpi-hooks

An update is available for rpm-mpi-hooks. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

The vulnerability of the mbedtls_mpi_exp_mod function in implementations of TLS and SSL protocols allows a attacker to cause a service failure.

The vulnerability of the mbedtlsmpiexpmod function in TLS and SSL protocol implementations is related to the lack of data size limitations during calculations. Exploiting this vulnerability allows a remote attacker to cause service failures...

PT-2025-8048

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A task leak issue in the Linux kernel has been resolved. The problem occurred in the pm8001 send abort all function, where allocated SAS tasks were not properly freed if pm8001 tag alloc...

PT-2025-8049

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, specifically in the scsi: pm8001 component. The problem occurred when certain functions, such as pm8001 chip set dev state req, pm8001 chip...

Exploit for HTTP Request Smuggling in Sap Content_Server

It is an offensive tool for SAP memory pipesMPI desynchronizat...

Siemens S7-400 CPUs Improper Verification of Cryptographic Signature (CVE-2018-16557)

A vulnerability has been identified in SIMATIC S7-400 incl. F V6 and below All versions, SIMATIC S7-400 PN/DP V7 incl. F All versions, SIMATIC S7-400H V4.5 and below All versions, SIMATIC S7-400H V6 All versions V6.0.9, SIMATIC S7-410 All versions V8.2.1. Sending of specially crafted packets to...

PT-2022-7647

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue may occur in the Linux kernel when a sas task is aborted by the upper layer before handling the I/O completion in mpi ssp completion or mpi sata completion. This...

PT-2022-7457

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the pm8001 component of the Linux kernel. This occurs when a TMF sas task is aborted before handling the IO completion in mpi ss...

Mageia: Security Advisory (MGASA-2018-0220)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Buffer Overflow

Slurm is vulnerable to buffer overflow. The vulnerability exists in the PMIx MPI plugin which causes a buffer overflow which leads to an application crash...

nss:mpi-sub: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5390361039077376 Project: nss Fuzzing Engine: libFuzzer Fuzz Target: mpi-sub Job Type: libfuzzerasannss Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ff882566c10 Crash State: NULL Sanitizer: address ASAN Recommended Security...

Libgcrypt before 1.8.8 and 1.9.x before 1.9.3 mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm and the window size is not chosen appropriately. This for example affects use of ElGamal in OpenPGP.

...

The vulnerability of the PMIx MPI resource manager plugin, developed by SLURM, arises from buffer overflows in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PMIx MPI resource manager plugin by SLURM is related to buffer overflow in memory. Exploiting this vulnerability allows an attacker who operates remotely to access confidential data, compromise its integrity, and cause service failures...

PT-2021-27442

Name of the Vulnerable Software and Affected Versions: GnuTLS affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. Technical details about the crash include the involvement of specific functions such as gnutls mpi dprint size,...

PT-2020-22815

Name of the Vulnerable Software and Affected Versions mbedTLS affected versions not specified Description The issue concerns several security-related problems. One problem is related to the size of calculations performed by mbedtls mpi exp mod, which could lead to a potential denial of service wh...