Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/05/08 6:41 p.m.3 views

CVE-2026-43303

A flaw was found in the Linux kernel's memory management subsystem. When pages are freed, the page-private field is not properly cleared. If these pages are later reallocated as high-order pages and split, the tail pages can retain stale page-private values. This can lead to a use-after-free...

7.8CVSS5.7AI score0.00013EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-0680

Malware in sbrugna...

5.9CVSS6.7AI score0.00802EPSS
Exploits0References16
Positive Technologies
Positive Technologies
added 2023/09/09 12:0 a.m.1 views

PT-2023-36002 · Git +1 · Kamailio

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as parse priv value and parse privacy, which are located in...

6.9AI score
Exploits0References2
RedHat Linux
RedHat Linux
added 2018/10/16 5:38 p.m.0 views

bouncycastle: Information exposure in DSA signature generation via timing attack

In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of blinding in 1.55, or earlier, may allow an attacker to gain information about the signature's k...

5.9CVSS7.1AI score0.00802EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2018/09/11 7:53 a.m.1 views

bouncycastle: Information exposure in DSA signature generation via timing attack

In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of blinding in 1.55, or earlier, may allow an attacker to gain information about the signature's k...

5.9CVSS7.1AI score0.00802EPSS
Exploits0References4
Prion
Prion
added 2018/06/04 1:29 p.m.16 views

Information disclosure

In the Bouncy Castle JCE Provider version 1.55 and earlier DSA signature generation is vulnerable to timing attack. Where timings can be closely observed for the generation of signatures, the lack of blinding in 1.55, or earlier, may allow an attacker to gain information about the signature's k...

4.3CVSS6.8AI score0.00802EPSS
Exploits0References7Affected Software2
Veracode
Veracode
added 2017/01/16 2:25 a.m.35 views

Information Diclosure

bouncycastle is vulnerable to timing attacks. Due to the lack of blinding, a malicious user can monitor the time taken to generate a signature to gain information about the signatures k value and eventually the private value...

5.9CVSS6.6AI score0.00802EPSS
Exploits0References9Affected Software226
Rows per page
Query Builder