CVE-2017-1000413: Exposure of Sensitive Information to an Unauthorized Actor

Linaro's open source TEE solution called OP-TEE, version 2.4.0 and older is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE resulting in a compromised private RSA key...

PT-2018-5188

Name of the Vulnerable Software and Affected Versions OP-TEE versions prior to 2.4.0 Description The issue concerns a vulnerability in the LibTomCrypt code, specifically to the bellcore attack, which can result in a compromised private RSA key. Recommendations For OP-TEE versions prior to 2.4.0,...

Linux kernel denial of service vulnerability (CNVD-2017-38512)

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in the checkaluop function in kernel/bpf/verifier.c in Linux kernel versions...

PT-2017-14668

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.5 Description The issue is related to the check alu op function in kernel/bpf/verifier.c, which allows local users to cause a denial of service or possibly have other unspecified impacts by leveraging incorrect...

PT-2017-13023

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.12.10 Linux kernel versions prior to 4.9 for KASLR protection mechanism bypass Description The issue is related to the acpi ps complete final op function in the Linux kernel, which does not properly flush node...

Amazon Linux AMI : libtommath / libtomcrypt (ALAS-2017-864)

possible OP-TEE Bleichenbacher attack : The rsaverifyhashex function in rsaverifyhash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which makes it easier for remote attackers to forge RSA signatures or public...

Medium: libtommath, libtomcrypt

Issue Overview: possible OP-TEE Bleichenbacher attack: The rsaverifyhashex function in rsaverifyhash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which makes it easier for remote attackers to forge RSA...

libming 'OpCode' function denial of service vulnerability (CNVD-2017-20196)

libming is a Flash SWF output library for PHP, Perl, Ruby, Python, C, C ++, Java, and more. The OpCode function called from isLogicalOp and decompileIF in util/decompile.c in Libming suffers from a heap-based buffer over-reading problem that allows an attacker to cause a denial of service via...

PHP 'zend_ini_do_op()' function buffer overflow vulnerability

PHP is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. A security vulnerability in the 'zendinidoop' function in the Zend/zendiniparser.c file in PHP allows remote attackers to exploit the vulnerability to submit a special...

PT-2017-4178

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.31 PHP versions 7.x prior to 7.0.21 PHP versions 7.1.x prior to 7.1.7 Description A stack-based buffer overflow in the zend ini do op function could cause a denial of service or potentially allow executing code. This...

DEBIAN-CVE-2017-9053

An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarfreadlocexprop is due to a failure to check a pointer for being in bounds in a few places in this function...

PT-2017-18672

Name of the Vulnerable Software and Affected Versions libdwarf affected versions not specified Description A heap-based buffer over-read issue was discovered in the dwarf read loc expr op function due to a failure to check a pointer for being in bounds. Recommendations At the moment, there is no...

CVE-2017-5991

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

CVE-2017-5991: NULL Pointer Dereference

An issue was discovered in Artifex MuPDF before 1912de5f08e90af1d9d0a9791f58ba3afdb9d465. The pdfrunxobject function in pdf-op-run.c encounters a NULL pointer dereference during a Fitz fzpaintpixmapwithmask painting operation. Versions 1.11 and later are unaffected...

CVE-2016-6129

The rsaverifyhashex function in rsaverifyhash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which makes it easier for remote attackers to forge RSA signatures or public certificates by leveraging a...

CVE-2016-6129

CVE-2016-6129 affects LibTomCrypt (used by OP-TEE before 2.2.0). The rsa_verify_hash_ex function does not validate that the message length matches the ASN.1 encoded data length, enabling Bleichenbacher-like forgery of RSA signatures or public certificates. Public disclosures in multiple feeds (De...

CVE-2016-6129: Improper Input Validation

The rsaverifyhashex function in rsaverifyhash.c in LibTomCrypt, as used in OP-TEE before 2.2.0, does not validate that the message length is equal to the ASN.1 encoded data length, which makes it easier for remote attackers to forge RSA signatures or public certificates by leveraging a...

PT-2017-19338

Name of the Vulnerable Software and Affected Versions irssi versions prior to 1.0.1 Description The issue concerns memory leaks and security problems in the irssi IRC textmode client. It includes a memory leak in the /OP and /VOICE commands, and another during the processing of the SASL response...

op-online.de XSS vulnerability

Vulnerable URL: https://www.op-online.de/suche/?tt=1=1zqjxpx"==== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 62541 VIP website status:| No Check op-online.de SSL connection:|...

PT-2017-8916

Name of the Vulnerable Software and Affected Versions LibTomCrypt versions prior to 2.2.0 OP-TEE versions prior to 2.2.0 Description The issue arises from the rsa verify hash ex function in rsa verify hash.c, which fails to validate that the message length matches the ASN.1 encoded data length...