2703 matches found
The vulnerability of the PKCS15-INIT personalization utility and the libopensc library, which are part of the software tools and libraries for working with smart cards in OpenSC, allows a violator to gain unauthorized access to protected information.
The vulnerability of the pkcs15-init personalization utility and the libopensc library related to the OpenSC software suite involves an operation that occurs outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
ROS-20241211-10
Vulnerability of GnuTLS transport layer cryptographic library is related to difference of response time when processing RSA ciphertext in ClientKeyExchange message with correct and incorrect addition of PKCS1. PKCS1 padding. Exploitation of the vulnerability may allow a remote intruder to gain...
ROS-20241211-01
The vulnerability of the OpenSC smart card software toolkit and libraries is related to the fact that, that in pkcs15init buffers are partially filled with data, and initialized portions of the buffer can be accessed by bypassing the restrictions. Exploitation of the vulnerability could allow an...
[SECURITY] Fedora 41 Update: nss-3.106.0-1.fc41
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
[SECURITY] Fedora 40 Update: nss-3.106.0-1.fc40
Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...
CVE-2024-11705
A flaw was found in Mozilla. The Mozilla Foundation's Security Advisory describes the following issue: NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with...
CVE-2024-11705
NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...
CVE-2024-11705
NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...
UBUNTU-CVE-2024-11705
NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...
CVE-2024-11705
NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...
CVE-2024-11705
NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...
CVE-2024-11705
The NSC_DeriveKey function in Firefox and Thunderbird (versions prior to 133) contains a NULL pointer dereference vulnerability. The function incorrectly assumes that the phKey parameter is always non-NULL; however, when passed as NULL, it triggers a segmentation fault (SEGV) , leading to applica...
CVE-2024-11705
NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...
CVE-2024-11705: NULL Pointer Dereference
NSCDeriveKey inadvertently assumed that the phKey parameter is always non-NULL. When it was passed as NULL, a segmentation fault SEGV occurred, leading to crashes. This behavior conflicted with the PKCS11 v3.0 specification, which allows phKey to be NULL for certain mechanisms. This vulnerability...
Security update for openssl-3
This update for openssl-3 fixes the following issues: CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed fo...
SUSE-SU-2024:3943-1 Security update for openssl-3
This update for openssl-3 fixes the following issues: - CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262...
PT-2025-6041 · Unknown +5 · Pam Pkcs11 +5
Name of the Vulnerable Software and Affected Versions: pam pkcs11 versions 0.6.0 through 0.6.12 Description: PAM-PKCS11 is a Linux-PAM login module that allows a X.509 certificate based user login. If cert policy is set to none the default value, then pam pkcs11 will only check if the user is...
Security update for openssl-1_1
This update for openssl-11 fixes the following issues: Security fixes: CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262 Other fixes: FIPS: AES GCM external IV implementation bsc1228618 FIPS: Mark PBKDF2 and HKDF HMAC input keys with size = 112 bits as approved in the SLI. bsc1228623...
SUSE-SU-2024:3905-1 Security update for openssl-1_1
This update for openssl-11 fixes the following issues: Security fixes: - CVE-2023-50782: Implicit rejection in PKCS1 v1.5 bsc1220262 Other fixes: - FIPS: AES GCM external IV implementation bsc1228618 - FIPS: Mark PBKDF2 and HKDF HMAC input keys with size = 112 bits as approved in the SLI...