Zimbra Collaboration Server 9.0.0 < 9.0.0 Patch 34 Multiple Vulnerabilities

According to its self-reported version number, Zimbra Collaboration Server is affected by multiple vulnerabilities including: - A bug that could lead to exposure of internal JSP and XML files. CVE-2023-38750 - OpenSSL package contains a security issue related to the verification of X.509...

K000135633: OpenSSL vulnerability CVE-2023-2975

Security Advisory Description Issue summary: The AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries which are unauthenticated as a consequence. Impact summary: Applications that use the AES-SIV algorithm and want to authenticate empty data entries ...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to information exposure in OpenSSL (CVE-2022-4304)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to information exposure in OpenSSL, caused by a timing-based side channel in the RSA Decryption implementation CVE-2022-4304. OpenSSL is included in the Base OS image used by our Speech Services.. This...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in OpenSSL (CVE-2023-0215)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in OpenSSL, caused by a use-after-free error related to the incorrect handling of streaming ASN.1 data by the BIOnewNDEF function CVE-2023-0215. OpenSSL is included in the Base OS image us...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in OpenSSL (CVE-2022-4450)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in OpenSSL, caused by a double-free error related to the improper handling of specific PEM data by the PEMreadbioex function CVE-2022-4450. OpenSSL is included in the Base OS image used by...

SUSE-SU-2023:3002-1 Security update for go1.20-openssl

This update for go1.20-openssl fixes the following issues: Update to version 1.20.6.1 bsc1206346: - CVE-2023-29406: Fixed insufficient sanitization of Host header bsc1213229...

SUSE: Security Advisory (SUSE-SU-2023:2973-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Tenable Security Center 6.0.0 / 6.1.0 / 6.1.1 Multiple Vulnerabilities (TNS-2023-26)

According to its self-reported version, the Tenable Security Center running on the remote host is either 6.0.0, 6.1.0 or 6.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-26 advisory. - Tenable Security Center leverages third-party software to help provid...

Security Bulletin: CVE-2023-0465 may affect IBM CICS TX Advanced 10.1

Summary CVE-2023-0465 may affect IBM CICS TX Advanced 10.1. IBM CICS TX Advanced 10.1 has addressed the applicable vulnerabilities. Vulnerability Details CVEID:CVE-2023-0465 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security restrictions, caused by a flaw when using a non-defau...

SUSE-SU-2023:2973-1 Security update for openssl

This update for openssl fixes the following issues: - CVE-2023-3446: Fixed DHcheck excessive time with over sized modulus bsc1213487...

SUSE-SU-2023:2972-1 Security update for openssl1

This update for openssl1 fixes the following issues: - CVE-2023-3446: Fixed DHcheck excessive time with over sized modulus bsc1213487...

EulerOS Virtualization 3.0.6.6 : shim-signed (EulerOS-SA-2023-2436)

According to the versions of the shim-signed packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The public API function BIOnewNDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used...

SUSE: Security Advisory (SUSE-SU-2023:2964-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : openssl (EulerOS-SA-2023-2431)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In addition to the crehash shell command injection identified in CVE-2022-1292, further circumstances where the crehash script...

SUSE SLED15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2023:2962-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2962-1 advisory. - CVE-2023-3446: Fixed DHcheck excessive time with over sized modulus bsc1213487. Tenable has extracted t...

SUSE SLES12: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2023:2964-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2964-1 advisory. - CVE-2023-3446: Fixed DHcheck excessive time with over sized modulus bsc1213487. Tenable has extracted the preceding description block...

Critical Photon OS Security Update - PHSA-2023-5.0-0057

Updates of 'unzip', 'openssh', 'libvirt', 'openssl' packages of Photon OS have been released...

SUSE: Security Advisory (SUSE-SU-2023:2961-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2023:2961-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2961-1 advisory. - CVE-2023-3446: Fixed DHcheck excessive time with over sized modulus bsc1213487. Tenable has extracted the preceding description block...

SUSE SLED15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2023:2965-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2965-1 advisory. - CVE-2023-3446: Fixed DHcheck excessive time with over sized modulus bsc1213487. Tenable has extracted t...