348 matches found
go-pkcs12
package pkcs12 import "software.sslmate.com/src/go-pkcs12" تنفّذ الحزمة pkcs12 بعضًا من مواصفات PKCS12 المعروفة أيضًا باسم P12 أو PFX. وهي مخصّصة لفك ترميز ملفات P12/PFX المشفّرة بصيغة DER لاستخدامها مع حزمة crypto/tls، ولترميز ملفات P12/PFX لاستخدامها بواسطة التطبيقات القديمة التي لا تدعم الصيغ...
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
A flaw was found in OpenSSL. This vulnerability allows a remote attacker to forge PKCS12 Public-Key Cryptography Standards 12 files that use Password-Based Message Authentication Code 1 PBMAC1 with short HMAC Hash-based Message Authentication Code keys. This can lead to a service accepting...
pki-toolbox
pki-toolbox صندوق أدوات مستضاف ذاتيًا، يعمل بالكامل من جانب العميل لقطع PKI : شهادات X.509، وطلبات توقيع الشهادات PKCS10، والسلاسل، وقوائم إبطال الشهادات CRLs، وحزم PKCS7 وPKCS12، وASN.1 الخام، وتحويل الصيغ، والبصمات، وإصدار الشهادات. بديل يحترم الخصوصية وقابل للاستضافة الذاتية عن أدوات فك ترميز...
CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
CVE-2026-6837-zyxel-export-cgi-command-injection
CVE-2026-6837: حقن أوامر PKCS12 عبر export-cgi من Zyxel يضم هذا المستودع التقرير العام، وسكربت التحقق السريع، والأدلة الداعمة لثغرة CVE-2026-6837. ما هذا CVE-2026-6837 هي ثغرة حقن أوامر بعد المصادقة في معالج export-cgi من Zyxel. في الفرع category=pkcs12، يبني المعالج أمر قشرة shell من اسم الشهادة...
CVE-2025-11187
CVE-2025-11187 PKCS12 PBMAC1 PBKDF2 keylength में Stack buffer overflow OpenSSL 3.X लगभग एक साल पहले यह stack buffer overflow मिला था, बाद में पता चला कि यह एक duplicate है CVE-2025-11187 समस्या libcrypto के PKCS PBMAC1 हैंडलिंग में होती है जब PBKDF2 का keylength attacker-controlled होता है। यह ए...
DEBIAN-CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
UBUNTU-CVE-2026-97873
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
CVE-2026-97873
The Bouncy Castle for Java library (before versions 1.86 and LTS 2.73.13 ) contains a vulnerability where the raw JCA provider's legacy PBES1 and PKCS#12 PBE families derive keys using an iteration count from untrusted input without bounding. An attacker could provide a small input to dictate an ...
CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
PT-2026-104565
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
CVE-2026-97873: Allocation of Resources Without Limits or Throttling
In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...
Linux Distros Unpatched Vulnerability : CVE-2026-97873
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with a...
PoC-CVE-2025-69421
مُعيد إنتاج انهيار فقط لـ CVE-2025-69421 يحتوي هذا المستودع على ملف PKCS12 تالف بأقل قدر ممكن يُعيد إنتاج CVE-2025-69421 في بيئة مخبرية معزولة. يحتوي ملف PFX المُنشأ على EncryptedData حيث يحذف EncryptedContentInfo الحقل الاختياري encryptedContent. يمكن لإصدارات OpenSSL المعرّضة للخطر تمرير مؤشر...
CVE-2026-63570
Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a crafted PKCS12 file to an application that loads it and requests a key entry's certificate chain to cause a denial of service, in...
CVE-2026-63578
The bc-csharp library (versions before 2.7.0 ) by Legion of the Bouncy Castle Inc. is vulnerable to a denial of service via CPU exhaustion in the PbeUtilities.GenerateCipherParameters function. This is caused by the allocation of resources without limits during password-based private-key decrypti...
CVE-2026-63575
The Bouncy Castle Inc. bc-csharp library (versions before 2.7.0 ) is vulnerable to a Denial of Service (DoS) attack due to a loop with an unreachable exit condition in the Pkcs12ParametersGenerator component. An attacker can provide a PKCS#12 (PFX) file or a PKCS#8 encrypted private key using a P...