Lucene search
+L

99 matches found

osv_cve
osv_cve
•added 2021/10/20 6:15 p.m.•37 views

CVE-2021-41135

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...

6.5CVSS6.5AI score0.01713EPSS
SaveExploits1References3
NVD
NVD
•added 2021/10/20 6:15 p.m.•41 views

CVE-2021-41135

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...

6.5CVSS0.01713EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/10/20 6:15 p.m.•13 views

CVE-2021-41135

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...

6.5CVSS6.6AI score0.01713EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2021/10/20 6:05 p.m.•50 views

CVE-2021-41135 Authz Module Non-Determinism

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...

6.5CVSS6.6AI score0.01713EPSS
SaveExploits1References3
Mend
Mend
•added 2021/10/20 6:05 p.m.•5 views

CVE-2021-41135

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...

7.1CVSS0.01713EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/20 12:00 a.m.•9 views

CVE-2021-41135: Improper Check for Unusual or Exceptional Conditions

The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a ValidateBasic method in the x/authz module. The MsgGrant of the x/authz module contains a Grant field which includ...

6.5CVSS5.8AI score0.01713EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/10/20 12:00 a.m.•21 views

Cosmos-SDK code-related vulnerabilities

Cosmos-SDK is a framework for building blockchain applications in Golang. Cosmos-SDK suffers from a code issue vulnerability that stems from non-deterministic behavior of the ValidateBasic method in the x/authz module in the software, and affected versions of the SDK are prone to consensus stoppi...

6.5CVSS6.5AI score0.01713EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/10/20 12:00 a.m.•11 views

PT-2021-23118

Name of the Vulnerable Software and Affected Versions Cosmos-SDK versions 0.43.x through 0.44.1 Description The Cosmos-SDK is a framework for building blockchain applications in Golang. Affected versions of the SDK were vulnerable to a consensus halt due to non-deterministic behaviour in a...

6.5CVSS0.01713EPSS
SaveExploits1References9
NVD
NVD
•added 2020/01/04 7:15 a.m.•33 views

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

9.8CVSS9.5AI score0.03163EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2020/01/04 7:15 a.m.•25 views

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

9.8CVSS6.9AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2020/01/04 7:15 a.m.•9 views

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

9.8CVSS8.6AI score0.03163EPSS
SaveExploits1References2
Prion
Prion
•added 2020/01/04 7:15 a.m.•27 views

Sql injection

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

7.5CVSS9.4AI score0.03163EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2020/01/04 6:05 a.m.•201 views

CVE-2020-5499

Summary: CVE-2020-5499 affects Baidu Rust SGX SDK up to version 1.0.8, where an enclave ID race can yield non‑deterministic results in which two global IDs are the same. The linked records consistently describe this as the enclave ID race issue and reference Baidu Rust SGX SDK 1.0.8 and earlier. ...

9.8CVSS9.4AI score0.03163EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2020/01/04 6:05 a.m.•41 views

CVE-2020-5499

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

9.5AI score0.03163EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/01/04 12:00 a.m.•6 views

PT-2020-18481

Name of the Vulnerable Software and Affected Versions Baidu Rust SGX SDK versions 1.0.0 through 1.0.8 Description The issue concerns non-deterministic results where two global IDs may sometimes be the same due to an enclave ID race. Recommendations For versions 1.0.0 through 1.0.8, consider...

9.8CVSS0.03163EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/04 12:00 a.m.•10 views

CVE-2020-5499: Undefined Security Weakness

Baidu Rust SGX SDK through 1.0.8 has an enclave ID race. There are non-deterministic results in which, sometimes, two global IDs are the same...

9.8CVSS8.1AI score0.03163EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•22 views

OpenSSL Data Compromise

The vulnerability exists in the SSL protocol for OpenSSL due to the use of non-deterministic padding for CBC encryption block chaining of the encryption text. Exploiting this vulnerability allows a malicious actor to obtain unencrypted data by using a padding prediction attack, known as POODLE...

4.3CVSS6.8AI score0.99999EPSS
SaveExploits7References3Affected Software1
securityvulns
securityvulns
•added 2008/08/15 12:00 a.m.•75 views

rPSA-2008-0253-1 git gitweb

rPath Security Advisory: 2008-0253-1 Published: 2008-08-12 Products: rPath Linux 2 Rating: Minor Exposure Level Classification: Indirect Non-deterministic Denial of Service Updated Versions: git=conary.rpath.com@rpl:2/1.5.6.4-1-0.1 gitweb=conary.rpath.com@rpl:2/1.5.6.4-1-0.1 rPath Issue Tracking...

7.5CVSS6.2AI score0.04302EPSS
SaveExploits1
securityvulns
securityvulns
•added 2008/05/29 12:00 a.m.•65 views

rPSA-2008-0177-1 emacs emacs-leim

rPath Security Advisory: 2008-0177-1 Published: 2008-05-27 Products: rPath Linux 1 Rating: Minor Exposure Level Classification: Indirect User Non-deterministic Unauthorized Access Updated Versions: emacs=conary.rpath.com@rpl:1/21.4a-5.4-1 emacs-leim=conary.rpath.com@rpl:1/21.4a-5.4-1 rPath Issue...

6.8CVSS7.6AI score0.03662EPSS
SaveExploits1
Rows per page
Query Builder