746 matches found
hsm
zhsm A Hardware Security Module HSM library for Zig providing PC/SC access to PIV , CAC , and YubiKey tokens. Status Aspect| Info ---|--- API Stability| Development Zig Version| 0.16.0 Platforms| Linux, macOS, Windows License| MIT Features PIV Support NIST SP 800-73-4 Certificate retrieval slots...
CVE-2026-65626
A flaw was found in the jose library. The fallback RSA decryption mechanism reveals whether decrypted data has valid padding through distinguishable error responses and timing discrepancies. An unauthenticated attacker can exploit this vulnerability by submitting a series of specially crafted...
CLEANSTART-2026-JO84876 flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext
Security vulnerability affects the nettle package. A flaw was found in the way nettle's RSA decryption functions handled specially crafted ciphertext...
CLEANSTART-2026-OA66833 NSS was susceptible to a timing side-channel attack when performing RSA decryption
Security vulnerability affects the nss package. NSS was susceptible to a timing side-channel attack when performing RSA decryption...
Astra Linux – vulnerability in Node.js
Node.js versions that bundle an unpatched version of OpenSSL or run against a dynamically linked unpatched version of OpenSSL are vulnerable to the Marvin Attack – https://people.redhat.com/hkario/marvin/ – provided that PCKS 1 v1.5 padding is permitted during RSA descryption using a private key...
CLSA-2026-1791541027 Fix CVE(s): CVE-2018-16869
SECURITY UPDATE: Bleichenbacher-type side-channel in RSA decryption - debian/patches/CVE-2018-16869-1.patch: add side-channel silent memeqlsec and cndmemcpy in memeql-sec.c, cnd-memcpy.c, memops.h, ccm.c, examples/rsa-decrypt.c, Makefile.in, testsuite. - debian/patches/CVE-2018-16869-2.patch: add...
CentOS Linux 7 [TuxCare] Security Update: nss-softokn / nss-softokn-devel / nss-softokn-freebl / etc (CENTOS7:CLSA-2025:1739975489)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1739975489 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover...
Rocky Linux 8 [CIQ] Security Update: nss / nss-debuginfo / nss-debugsource / nss-devel / nss-softokn / etc (crlsa-2024_0105)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240105 advisory. nss: timing attack against RSA decryption CVE-2023-5388 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...
Rocky Linux 8 [CIQ] Security Update: gnutls / gnutls-c++ / gnutls-c++-debuginfo / gnutls-dane / etc Multiple Vulnerabilities (crlsa-2021_4451)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214451 advisory. nettle: Remote crash in RSA decryption via manipulated ciphertext CVE-2021-3580 gnutls: Use after free in client keyshare extension CVE-2021-20231 gnutls:...
Rocky Linux 8 [CIQ] Security Update: python-cryptography-debugsource / python3-cryptography / etc Multiple Vulnerabilities (crlsa-2021_1608)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20211608 advisory. python-cryptography: bleichenbacher timing oracle attack against RSA decryption CVE-2020-25659 python-cryptography: certain sequences of update calls when...
AlmaLinux 9.2 [TuxCare] Security Update: nspr / nspr-devel / nss / nss-devel / nss-pkcs11-devel / etc (ALMALINUX9.2:CLSA-2025:1756961235)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1756961235 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to...
CLSA-2026-1790677972 gnutls: Fix of 10 CVEs
Rebased onto the vendor 3.3.29-9.0.3.el79 sources - CVE-2026-5260: guard PKCS11 RSA decryption against short-ciphertext heap overread TuxCare fix retained - CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build - CVE-2026-42011 is not applicable to this baseline per the vendor...
AlmaLinux 9.2 [TuxCare] Security Update: iperf3 / iperf3-devel (ALMALINUX9.2:CLSA-2026:1779373661)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779373661 advisory. - iPerf3 before 3.17, when used with OpenSSL before 3.2.0 as a server with RSA authentication, allows a timing side channel in RSA decryption...
CentOS Linux 7 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc (CENTOS7:CLSA-2025:1751271968)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1751271968 advisory. - In situations where an attacker receives automated notification of the success or failure of a decryption attempt an attacker, after sending a...
CLSA-2026-1790678814 gnutls: Fix of 10 CVEs
Rebased onto the vendor 3.3.29-9.0.3.el79 sources - CVE-2026-5260: guard PKCS11 RSA decryption against short-ciphertext heap overread TuxCare fix retained - CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build - CVE-2026-42011 is not applicable to this baseline per the vendor...
CLSA-2026-1790280771 gnutls: Fix of 10 CVEs
Rebased onto the vendor 3.3.29-9.0.3.el79 sources - CVE-2026-5260: guard PKCS11 RSA decryption against short-ciphertext heap overread TuxCare fix retained - CVE-2026-42014 and CVE-2026-42015 are fixed by the vendor in this build - CVE-2026-42011 is not applicable to this baseline per the vendor...
Astra Linux – Vulnerability in python-cryptography
Python-Cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, due to timed processing of valid PKCS1 v1.5 ciphertext...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, NSS
NSS was vulnerable to a timing-side-channel attack during RSA decryption. This attack could potentially allow an attacker to retrieve private data. This vulnerability affects Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9...
