24576 matches found
Photon OS 4.0: Openssl PHSA-2024-4.0-0559
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0559. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2023-4.0-0516
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0516. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2023-4.0-0420
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0420. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Openssl PHSA-2022-3.0-0373
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0373. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2023-4.0-0496
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0496. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2023-4.0-0436
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0436. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Openssl PHSA-2024-5.0-0243
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0243. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Openssl PHSA-2023-5.0-0034
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0034. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2023-4.0-0472
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0472. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Openssl PHSA-2024-3.0-0721
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-3.0-0721. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Openssl PHSA-2024-5.0-0198
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0198. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Openssl PHSA-2022-3.0-0368
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0368. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Openssl PHSA-2024-5.0-0301
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0301. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Openssl PHSA-2023-5.0-0070
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0070. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2024-5535 affecting package openssl for versions less than 3.3.0-2
CVE-2024-5535 affecting package openssl for versions less than 3.3.0-2. A patched version of the package is available...
golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey and ctx. That functi...
golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey and ctx. That functi...
Photon OS 4.0: Openssl PHSA-2023-4.0-0330
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0330. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0464)
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of...
Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0465)
Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that...