923 matches found
Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2024-468)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-468 advisory. AWS is aware of CVE-2023-48795, also known as Terrapin, which is found in the SSH protocol and affects SSH channel integrity. A protocol extension has been introduced by OpenSSH which needs to be applie...
OESA-2023-1978 openssh security update
OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...
CVE-2023-49328
On a Wolters Kluwer B.POINT 23.70.00 server running Linux on premises, during the authentication phase, a validated system user can achieve remote code execution via Argument Injection in the server-to-server module...
Prefix Truncation Attack (Terrapin Attack)
libssh is vulnerable to Terrapin attack. The vulnerability is due to mishandling of the handshake phase and sequence numbers in the SSH Binary Packet Protocol BPP with certain OpenSSH extensions. This allows an attacker to bypass integrity checks and omit packets during extension negotiation, and...
The vulnerability of the SSH protocol lies in its ability to adjust packet sequence numbers during connection negotiation and delete arbitrary amounts of SSH protocol messages. This allows attackers to bypass integrity checks, disable existing security functions, and gain unauthorized access to protected information.
The vulnerability of the SSH protocol lies in the ability to alter the sequence numbers of packets during the connection negotiation process, thereby eliminating any number of SSH protocol messages. Exploiting this vulnerability allows a malicious actor to bypass integrity checks, disable existin...
User session fails to launch session Received an invalid packet during its ?? handshake phase
In System Event log on the VDA a TDICA event 1019 appears. "The Citrix TDICA Transport Driver connection from xxx.xxx.xxx.xxx: to port 443received an invalid packet during its ?? handshake phase" There is however no issue launching the session and no disconnection takes place. In this scenario th...
UBUNTU-CVE-2023-6679
A null pointer dereference vulnerability was found in dpllpinparentpinset in drivers/dpll/dpllnetlink.c in the Digital Phase Locked Loop DPLL subsystem in the Linux kernel. This issue could be exploited to trigger a denial of service...
phase-6.de Cross Site Scripting vulnerability OBB-3810064
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-40238
A LogoFAIL issue was discovered in BmpDecoderDxe in Insyde InsydeH2O with kernel 5.2 before 05.28.47, 5.3 before 05.37.47, 5.4 before 05.45.47, 5.5 before 05.53.47, and 5.6 before 05.60.47 for certain Lenovo devices. Image parsing of crafted BMP logo files can copy data to a specific address duri...
The vulnerability of the microprogrammed protection system for the SEL-451 phase-change relay exists due to insufficient verification of input data. This allows a perpetrator to trigger a malfunction and lock out arbitrary services.
The vulnerability of the microprogrammed protection system for the SEL-451 phase-change relay exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to cause malfunctions and lock out arbitrary services...
The vulnerability of the microprogrammed protection system for the SEL-451 phase switching relay, related to unlimited resource distribution or throttling, allows a intruder to cause a service failure.
The vulnerability of the microprogrammed protection system of the SEL-451 phase-switching relay exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to create attacks based on cross-site scenarios...
The vulnerability of the microprogrammed protection software of the SEL-411L phase-change relay arises from the lack of measures taken to protect the website structure. This allows attackers to execute attacks against authorized and authenticated users based on cross-site scenarios.
The vulnerability of the microprogrammed protection system of the SEL-411L phase-changing relay exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor, operating remotely, to execute attacks based on cross-site scenario...
The vulnerability of the microprogrammed protection system for the SEL-451 phase-change order relay exists due to an unreliable authentication mechanism. This allows attackers to execute session hijacking attacks and bypass the authentication process.
The vulnerability of the SEL-451 phase-changing protection relay’s microprogramming software exists due to an unreliable authentication mechanism. Exploiting this vulnerability allows a malicious actor to perform session hijacking attacks and bypass the authentication process...
The vulnerability of the microprogrammed protection software of the SCHWEitzer Engineering Laboratories SEL-411L phase-change relay arises due to insufficient verification of input data. This vulnerability allows a perpetrator to disclose the protected information.
The vulnerability of the microprogrammed protection software of the Schweitzer Engineering Laboratories SEL-411L phase-change relay exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...
The vulnerability of microprogrammed protection systems in the SCHWEitzer Engineering Laboratories SEL-451 phase-change relay, related to insufficient entropy, allows attackers to bypass the authentication process.
The vulnerability of the microprogrammed protection system of the SCHWEitzer Engineering Laboratories SEL-451 phase-change relay is related to insufficient entropy. Exploiting this vulnerability allows a malicious actor to bypass the authentication process...
PT-2023-31304 · Asr +1 · Falcon +2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in SIM management during the USIMPhase2init process. No additional details are provided about the estimated number ...
PT-2023-32256 · Eclipse +4 · Eclipse Openj9 +4
Name of the Vulnerable Software and Affected Versions: Eclipse OpenJ9 versions prior to 0.41.0 Description: The issue is related to a denial of service caused by a flaw when a shutdown signal SIGTERM, SIGINT or SIGHUP is received before the JVM has finished initializing. This can lead to an...
Symfony Security Vulnerabilities
Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. A security vulnerability exists in Symfony that stems from a user identifier not changing between the authentication phase and a successful login...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
