99 matches found
UBUNTU-CVE-2023-29479
Ribose RNP before 0.16.3 may hang when the input is malformed...
[SECURITY] Fedora 38 Update: rust-sequoia-octopus-librnp-1.4.1-5.fc38
Reimplementation of RNP's interface using Sequoia for use with Thunderbird...
[SECURITY] Fedora 37 Update: rust-sequoia-octopus-librnp-1.4.1-5.fc37
Reimplementation of RNP's interface using Sequoia for use with Thunderbird...
SUSE CVE-2021-33589
Ribose RNP before 0.15.1 does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than on the tin of the algorithm...
[SECURITY] Fedora 36 Update: rust-sequoia-octopus-librnp-1.4.1-2.fc36
Reimplementation of RNP's interface using Sequoia for use with Thunderbird...
[SECURITY] Fedora 37 Update: rust-sequoia-octopus-librnp-1.4.1-2.fc37
Reimplementation of RNP's interface using Sequoia for use with Thunderbird...
Code injection
An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid...
Oracle Linux 7 : thunderbird (ELSA-2021-1192)
The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1192 advisory. 78.9.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.9.1-1 - Update to 78.9.1 Tenable has extracted...
Oracle Linux 8 : thunderbird (ELSA-2021-1193)
The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-1193 advisory. 78.9.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 78.9.1-1 - Update to 78.9.1 Tenable has extracted...
Mozilla: Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key
An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid...
Mozilla: Inability to send encrypted OpenPGP email after importing a crafted OpenPGP key
An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid...
CVE-2021-23993
An attacker may perform a DoS attack to prevent a user from sending encrypted email to a correspondent. If an attacker creates a crafted OpenPGP key with a subkey that has an invalid self signature, and the Thunderbird user imports the crafted key, then Thunderbird may try to use the invalid...
rnp:fuzz_keyring_kbx: Heap-buffer-overflow in mem_src_read
Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=6221139846889472 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzkeyringkbx Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x60e000000376 Crash...
rnp:fuzz_keyring_kbx: Heap-buffer-overflow in rnp_key_store_kbx_from_src
Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5632243442384896 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzkeyringkbx Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000005d2 Cras...
rnp:fuzz_keyring: Stack-buffer-overflow in stream_write_key
Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5745453998800896 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzkeyring Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7fff35f15c68 Crash...
rnp:fuzz_dump: Stack-buffer-overflow in dst_print_s2k
Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5156863386320896 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffeefb264b8 Crash...
rnp:fuzz_dump: Negative-size-param in armored_src_read
Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5105305323831296 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: armoredsrcread srcpe...
rnp:fuzz_dump: Global-buffer-overflow in armor_read_crc
Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5954592547012608 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7fe71017cd8d Crash...
rnp:fuzz_dump: Global-buffer-overflow in armor_parse_header
Project: https://github.com/rnpgp/rnp.git Detailed Report: https://oss-fuzz.com/testcase?key=5787309660962816 Project: rnp Fuzzing Engine: libFuzzer Fuzz Target: fuzzdump Job Type: libfuzzerasanrnp Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x7fcc9747e7a5 Crash...