24878 matches found
CVE-2023-0286 affecting package openssl 1.1.1k-16
CVE-2023-0286 affecting package openssl 1.1.1k-16. A patched version of the package is available...
Vulnerable OpenSSL included in sgx-dcap-quote-verify-python
sgx-dcap-quote-verify-python includes a statically linked copy of OpenSSL. The version of OpenSSL included in sgx-dcap-quote-verify-python 0.0.1..0.0.2 is vulnerable to a security issue. More details about the OpenSSL vulnerabilities themselves can be found at...
GHSA-344M-QCJQ-XGRF Vulnerable OpenSSL included in sgx-dcap-quote-verify-python
sgx-dcap-quote-verify-python includes a statically linked copy of OpenSSL. The version of OpenSSL included in sgx-dcap-quote-verify-python 0.0.1..0.0.2 is vulnerable to a security issue. More details about the OpenSSL vulnerabilities themselves can be found at...
Fortra GoAnywhere MFT Unsafe Deserialization Remote Code Execution Exploit
This Metasploit module exploits an object deserialization vulnerability in Fortra GoAnywhere MFT. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Fortra GoAnywhere MFT Unsafe Deserialization...
The vulnerability of the BIO_new_NDEF() function in the OpenSSL library, which allows a hacker to cause a service failure
The vulnerability of the BIOnewNDEF function in the OpenSSL library is related to the use of memory after it is freed as a result of pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
NULL Pointer Dereference
openssl is vulnerable to null point dereference. The vulnerability exists because there is a missing check for the return value from the initialization function which later leads to invalid usage of the digest api most likely leading to a crash...
[SECURITY] Fedora 37 Update: openssl-3.0.8-1.fc37
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...
Fedora 37 : openssl (2023-57f33242bc)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-57f33242bc advisory. Rebase to upstream version 3.0.8 Resolves: CVE-2022-4203 Resolves: CVE-2022-4304 Resolves: CVE-2022-4450 Resolves: CVE-2023-0215 Resolves:...
Fedora: Security Advisory for openssl (FEDORA-2023-57f33242bc)
The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Denial Of Service (DoS)
openssl is vulenerable to denial of service DoS. The vulnerability exists in EVPPKEYpubliccheck function because it can be triggered on read when an application tries to check a malformed DSA public key which will allow an attacker to lead an application crash...
NULL Pointer Dereference
openssl is vulnerable to NULL Pointer Dereference. The vulnerability exists because it can be triggered when an application tries to load malformed PKCS7 data which can lead to an application crash...
Timing Attack
openssl is vulnerable to Timing Attack. The vulnerability exists in rsa/rsaossl.c because an attacker can recover ciphertext with a Bleichenbacher style attack by sending a large number of trial messages...
OpenSSL Releases Update to Address Several High-Severity Vulnerabilities
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The OpenSSL Project has released fixes for several security flaws, including a high-severity bug CVE-2023-0286 that could expose users to malicious attacks. The bug is related to a type of confusi...
CLSA-2023-1676026276 openssl: Fix of 2 CVEs
CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...
CLSA-2023-1676026152 openssl: Fix of 2 CVEs
CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...
CLSA-2023-1676025915 openssl: Fix of 2 CVEs
CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...
CLSA-2023-1676025596 openssl: Fix of 2 CVEs
CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...
openssl: Fix of 2 CVEs
CVE-2023-0215: Fix a UAF resulting from a bug in BIOnewNDEF - CVE-2023-0286: Fix GENERALNAMEcmp for x400Address...
Buffer Overflow
openssl is vulnerable to buffer overflow. The vulnerability exists because a buffer overrun can be be triggered in X.509 certificate verification, specifically in name constraint checking where this occurs after certificate chain signature verification and requires either a CA to have signed the...
