318 matches found
openCryptoki 安全漏洞
openCryptoki is openCryptoki open source a PKCS11 library and tools for Linux. A security vulnerability exists in openCryptoki versions 3.25.0 and 3.26.0, which stems from a heap buffer overflow in the CKMECDHAESKEYWRAP implementation that could lead to heap corruption or denial of service...
PT-2026-2795
openCryptoki is a PKCS11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM ECDH AES KEY WRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public...
EUVD-2012-4386
Malware in sbrugna...
EUVD-2021-27058
Malware in sbrugna...
EUVD-2012-4385
Malware in sbrugna...
EUVD-2024-16696
Malicious code in bioql PyPI...
TencentOS Server 3: opencryptoki (TSSA-2024:0098)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0098 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
TencentOS Server 4: opencryptoki (TSSA-2024:0927)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0927 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2024-0914 affecting package opencryptoki for versions less than 3.24.0-3
CVE-2024-0914 affecting package opencryptoki for versions less than 3.24.0-3. An upgraded version of the package is available that resolves this issue...
Opencryptoki: timing side-channel in handling of rsa pkcs#1 v1.5 padded ciphertexts (marvin)
...
Alibaba Cloud Linux 3 : 0210: opencryptoki bug fix and enhancement update (Moderate) (ALINUX3-SA-2024:0210)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0210 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-0914: A timing side-channel vulnerability...
opencryptoki bug fix and enhancement update
An update is available for opencryptoki. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux...
Linux Distros Unpatched Vulnerability : CVE-2024-0914
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A timing side-channel vulnerability has been discovered in the opencryptoki package while processing RSA PKCS1 v1.5 padded ciphertexts. This flaw could...
Linux Distros Unpatched Vulnerability : CVE-2012-4455
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openCryptoki 2.4.1 allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the 1 LCK..opencryptoki or 2...
Linux Distros Unpatched Vulnerability : CVE-2012-4454
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - openCryptoki before 2.4.1, when using spinlocks, allows local users to create or set world-writable permissions on arbitrary files via a symlink attack on the 1...
Advisory ROSA-SA-2025-2728
Software: opencryptoki 3.21.0 OS: ROSA Virtualization 3.0 packageevrstring: opencryptoki-3.21.0-10.rv30 CVE-ID: CVE-2024-0914 BDU-ID: 2024-02839 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the opencryptoki package is related to the processing of RSA PKCS1 augmented ciphertexts. Exploitation of...
RHSA-2024:1992 Red Hat Security Advisory: opencryptoki security update
Bulletin has no description...
RHSA-2024:1856 Red Hat Security Advisory: opencryptoki security update
Bulletin has no description...
RHSA-2024:1608 Red Hat Security Advisory: opencryptoki security update
Bulletin has no description...
RHSA-2024:1411 Red Hat Security Advisory: opencryptoki security update
Bulletin has no description...