CVE-2024-38068

Windows Online Certificate Status Protocol OCSP Server Denial of Service Vulnerability...

CVE-2024-38067

Windows Online Certificate Status Protocol OCSP Server Denial of Service Vulnerability...

CVE-2024-38031

Windows Online Certificate Status Protocol OCSP Server Denial of Service Vulnerability...

CVE-2024-38068 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

...

CVE-2024-38068

Technical details about CVE-2024-38068 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are described here; monitor for updates from official advisories.

CVE-2024-38067

Technical details about CVE-2024-38067 (Windows OCSP Server DoS) are not provided in the supplied connected documents; no product/version/root-cause/impact/fix information is present. Monitor for updates.

CVE-2024-38031 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

...

CVE-2024-38031

Technical details, affected products/versions, and remediation for CVE-2024-38031 are not provided in the connected documents. Public specifics such as exploitability and fixes are not included; monitor for updates from official sources.

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

...

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

...

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

...

SUSE CVE-2024-2660

Vault and Vault Enterprise TLS certificates auth method did not correctly validate OCSP responses when one or more OCSP sources were configured. This vulnerability, CVE-2024-2660, affects Vault and Vault Enterprise 1.14.0 and above, and is fixed in Vault 1.16.0 and Vault Enterprise 1.16.1, 1.15.7...

Security Bulletin: AIX is vulnerable to security restrictions bypass due to cURL libcurl (CVE-2024-0853)

Summary Vulnerability in cURL libcurl could allow a remote attacker to bypass security restrictions CVE-2024-0853. AIX uses cURL libcurl as part of rsyslog, LV/PV encryption integration with HPCS and in Live Update for interacting with HMC. Vulnerability Details CVEID:CVE-2024-0853 DESCRIPTION:...

PT-2024-10388 · Palo Alto Networks · Palo Alto Networks Globalprotect

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect affected versions not specified Description: The issue is related to an insufficient certification validation in the GlobalProtect app, allowing attackers to connect the app to arbitrary servers. This can enab...

OpenSSL 0.9.8h < 0.9.8r Vulnerability

The version of OpenSSL installed on the remote host is prior to 0.9.8r. It is, therefore, affected by a vulnerability as referenced in the 0.9.8r advisory. - ssl/t1lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service crash, and...

GO-2024-2690 HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault

HashiCorpVault does not correctly validate OCSP responses in github.com/hashicorp/vault...

RHEL 7 : firefox (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - Mozilla: Type confusion for special arguments in IonMonkey CVE-2020-15656 - Mozilla: Malicious Extension...

The vulnerability of the C++ Botan cryptographic library, related to incorrect certificate verification, allows attackers to forge OCSP responses.

The vulnerability of the C++ Botan cryptographic library is related to incorrect certificate verification. Exploiting this vulnerability could allow a remote attacker to forge OCSP responses...

ROS-20240527-01

A vulnerability in the Botan C++ cryptographic library is related to improper certificate validation. Exploitation of the vulnerability could allow an attacker acting remotely to spoof OCSP responses...

RHEL 6 : thunderbird (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - thunderbird: Memory corruption when processing S/MIME messages CVE-2021-43529 - thunderbird: Crafted emai...