24567 matches found
Photon OS 5.0: Openssl PHSA-2024-5.0-0301
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0301. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 3.0: Openssl PHSA-2022-3.0-0368
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0368. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Openssl PHSA-2023-5.0-0070
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0070. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Openssl PHSA-2024-5.0-0198
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0198. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2024-5535 affecting package openssl for versions less than 3.3.0-2
CVE-2024-5535 affecting package openssl for versions less than 3.3.0-2. A patched version of the package is available...
golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey and ctx. That functi...
golang-fips/openssl: Memory leaks in code encrypting and decrypting RSA payloads
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.goL113. The objects leaked are pkey and ctx. That functi...
Photon OS 4.0: Openssl PHSA-2023-4.0-0308
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0308. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Amazon Linux 2 : edk2 (ALAS-2024-2591)
It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2591 advisory. Issue summary: Calling the OpenSSL API function SSLselectnextproto with anempty supported client protocols buffer may cause a crash or memory contents tobe sent to the peer. Impact summary: A buffer...
Photon OS 4.0: Openssl PHSA-2023-4.0-0406
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0406. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2022-4.0-0143
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0143. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2023-4.0-0330
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0330. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0464)
A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy constraints. Attackers may be able to exploit this vulnerability by creating a malicious certificate chain that triggers exponential use of...
Siemens SIMATIC and SCALANCE Products Inadequate Encryption Strength (CVE-2023-0465)
Applications that use a non-default option when verifying certificates may be vulnerable to an attack from a malicious CA to circumvent certain checks. Invalid certificate policies in leaf certificates are silently ignored by OpenSSL and other certificate policy checks are skipped for that...
Photon OS 5.0: Openssl PHSA-2023-5.0-0096
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0096. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2022-4.0-0185
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0185. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2022-4.0-0272
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0272. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2023-4.0-0434
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0434. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2022-4.0-0162
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0162. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 4.0: Openssl PHSA-2022-4.0-0202
An update of the openssl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0202. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...