Lucene search
K

34 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/22 12:0 a.m.5 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: spice (UTSA-2026-016591)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016591 advisory. A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing...

5.3CVSS6.6AI score0.00866EPSS
Exploits1References4
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в spice

A flaw was discovered in the spice library in versions prior to 0.14.92. A DoS tool could make it easier for remote attackers to cause a denial of service CPU consumption by performing multiple renegotiations within a single connection...

5.3CVSS6.7AI score0.00866EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/27 3:44 p.m.3 views

CVE-2026-32983

Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending excessive renegotiation requests. Attackers can exploit the lac...

7.5CVSS5.9AI score0.00162EPSS
Exploits0References4
NVD
NVD
added 2025/12/23 9:15 p.m.4 views

CVE-2025-11419

A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable...

7.5CVSS0.00105EPSS
Exploits0References8
Cvelist
Cvelist
added 2025/12/23 8:42 p.m.25 views

CVE-2025-11419 Keycloak: keycloak tls client-initiated renegotiation denial of service

A flaw was found in Keycloak. This vulnerability allows an unauthenticated remote attacker to cause a denial of service DoS by repeatedly initiating TLS 1.2 client-initiated renegotiation requests to exhaust server CPU resources, making the service unavailable...

7.5CVSS0.00105EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:0 a.m.23 views

Rocky Linux 8 : spice (RLSA-2021:1924)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:1924 advisory. - A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by...

5.3CVSS6.1AI score0.00866EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.21 views

Debian: Security Advisory (DSA-1934-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.6AI score0.03845EPSS
Exploits16References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:21 a.m.2 views

SUSE CVE-2003-0192

Apache 2 before 2.0.47, and certain versions of modssl for Apache 1.3, do not properly handle "certain sequences of per-directory renegotiations and the SSLCipherSuite directive being used to upgrade from a weak ciphersuite to a strong one," which could cause Apache to use the weak ciphersuite...

6.4CVSS6.9AI score0.13127EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:19 a.m.2 views

SUSE CVE-2019-0190

A bug exists in the way modssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause modssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or...

7.5CVSS8.7AI score0.22908EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 3:47 a.m.1 views

SUSE CVE-2021-20201

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection...

6.8CVSS6.5AI score0.00866EPSS
Exploits1References12
VulnCheck KEV
VulnCheck KEV
added 2022/02/22 12:0 a.m.1 views

VulnCheck KEV: CVE-2019-0190

A bug exists in the way modssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause modssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1...

7.5CVSS6.9AI score0.22908EPSS
Exploits0References1
OSV
OSV
added 2021/05/28 11:15 a.m.1 views

ALPINE-CVE-2021-20201

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection...

5.3CVSS6.5AI score0.00866EPSS
Exploits1References1
NVD
NVD
added 2021/05/28 11:15 a.m.20 views

CVE-2021-20201

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection...

5.3CVSS0.00866EPSS
Exploits1References3
OSV
OSV
added 2021/05/28 11:15 a.m.1 views

DEBIAN-CVE-2021-20201

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection...

5.3CVSS6AI score0.00866EPSS
Exploits1References1
Prion
Prion
added 2021/05/28 11:15 a.m.13 views

Design/Logic Flaw

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection...

5CVSS5.2AI score0.00866EPSS
Exploits1References3Affected Software2
OSV
OSV
added 2021/05/28 11:15 a.m.0 views

UBUNTU-CVE-2021-20201

A flaw was found in spice in versions before 0.14.92. A DoS tool might make it easier for remote attackers to cause a denial of service CPU consumption by performing many renegotiations within a single connection...

5.3CVSS6.3AI score0.00866EPSS
Exploits1References3
OSV
OSV
added 2019/01/30 10:29 p.m.1 views

ALPINE-CVE-2019-0190

A bug exists in the way modssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause modssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or...

7.5CVSS6.8AI score0.22908EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2019/01/22 9:20 p.m.136 views

CVE-2019-0190

A flaw was found in the way modssl handled client renegotiations. A remote attacker could send a malicious request to cause modssl to enter an infinite loop resulting in a denial of service...

7.5CVSS2.6AI score0.22908EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2010/12/02 12:0 a.m.54 views

SuSE 11 Security Update : OpenSSL (SAT Patch Number 2214)

This update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand. CVE-2009-3245 Installation notes This update is provided as RPM packages that can easily be installed onto a running system by...

10CVSS7.6AI score0.19914EPSS
Exploits15References5
Tenable Nessus
Tenable Nessus
added 2010/10/11 12:0 a.m.44 views

SuSE 10 Security Update : OpenSSL (ZYPP Patch Number 6944)

This update adds support for RFC5746 TLS renegotiations to address vulnerabilities tracked as CVE-2009-3555. It also fixes a mishandling of OOM conditions in bnwexpand. CVE-2009-3245 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

10CVSS7.6AI score0.19914EPSS
Exploits15References4
Rows per page
Query Builder