24583 matches found
Mageia: Security Advisory (MGASA-2024-0129)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2024-0129 Updated openssl packages fix security vulnerability
Unbounded memory growth with session handling in TLSv1.3. CVE-2024-2511...
Updated openssl packages fix security vulnerability
Unbounded memory growth with session handling in TLSv1.3. CVE-2024-2511...
The vulnerability of the implementation of the POLY1305 MAC algorithm in the OpenSSL cryptographic library allows a perpetrator to induce a service failure.
The vulnerability of the POLY1305 MAC algorithm implementation in the OpenSSL cryptographic library arises due to an overflow in the buffer used for storing data. Exploitation of this vulnerability can allow a malicious actor, operating remotely, to cause service failures by restoring the content...
ROS-20240412-06
A vulnerability in the OpenSSL library's implementation of the SM2 cryptographic algorithm is related to buffer copying without checking the size of the input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code by transmitting specially crafte...
squid: Denial of Service in SSL Certificate validation
A flaw was found in Squid. Due to an improper validation of the specified index bug, Squid compiled using --with-openssl is vulnerable to a denial of service attack against SSL Certificate validation. This flaw allows a remote server to perform a denial of service against the Squid Proxy by...
FreeBSD : OpenSSL -- Unbounded memory growth with session handling in TLSv1.3 (7c217849-f7d7-11ee-a490-84a93843eb75)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7c217849-f7d7-11ee-a490-84a93843eb75 advisory. - Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when...
Important Photon OS Security Update - PHSA-2024-5.0-0243
Updates of 'nodejs', 'openssl' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2024-5.0-91-0243
Updates of 'nodejs', 'openssl' packages of Photon OS have been released...
Denial Of Service (DoS)
OpenSSL is vulnerable to Denial of Service DoS. The vulnerability is caused by incorrect handling of TLSv1.3 sessions when certain non-default server configurations are used without proper anti-replay protection, causing the session cache to grow unbounded and potentially leading to a Denial of...
CVE-2024-2511
A flaw was found in OpenSSL. A malicious client can trigger an uncontrolled memory consumption, resulting in a Denial of Service. This issue occurs due to OpenSSL's TLSv3.1 session cache going into an incorrect state, leading to it failing to flush properly as it fills. OpenSSL must be configured...
OpenSSL DoS Vulnerability (20240408) - Windows
OpenSSL is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
EulerOS 2.0 SP9 : openssl (EulerOS-SA-2024-1491)
According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: Processing a maliciously formatted PKCS12 file may lead OpenSSL to crash leading to a potential Denial of Service attack Impact...
OpenSSL DoS Vulnerability (20240408) - Linux
OpenSSL is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openssl:openssl";...
ROS-20240409-06
A vulnerability in SaltStack Salt's configuration management and remote operations execution system is related to receiving multiple bad packets to the server equal to the number of worker threads, Salt will stop responding back requests before restarting. Exploitation of the vulnerability could...
CVE-2024-2511
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
CVE-2024-2511 vulnerabilities
Vulnerabilities for packages: openssl...
AZL-39794 CVE-2024-2511 affecting package openssl for versions less than 3.3.0-1
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
AZL-42949 CVE-2024-2511 affecting package openssl for versions less than 1.1.1k-30
Issue summary: Some non-default TLS server configurations can cause unbounded memory growth when processing TLSv1.3 sessions Impact summary: An attacker may exploit certain server configurations to trigger unbounded memory growth that would lead to a Denial of Service This problem can occur in...
