Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2023/08/22 6:06 p.m.•33 views

rustls-webpki: CPU denial of service in certificate path building

When this crate is given a pathological certificate chain to validate, it will spend CPU time exponential with the number of candidate certificates at each step of path building. Both TLS clients and TLS servers that accept client certificate are affected. We now give each path building operation...

6.8AI score
SaveExploits0References5Affected Software1
OSV
OSV
•added 2023/08/22 12:00 p.m.•71 views

RUSTSEC-2023-0053 rustls-webpki: CPU denial of service in certificate path building

When this crate is given a pathological certificate chain to validate, it will spend CPU time exponential with the number of candidate certificates at each step of path building. Both TLS clients and TLS servers that accept client certificate are affected. We now give each path building operation...

7.5CVSS6.9AI score0.06377EPSS
SaveExploits0References2
RustSec
RustSec
•added 2023/08/22 12:00 p.m.•9 views

rustls-webpki: CPU denial of service in certificate path building

When this crate is given a pathological certificate chain to validate, it will spend CPU time exponential with the number of candidate certificates at each step of path building. Both TLS clients and TLS servers that accept client certificate are affected. We now give each path building operation...

7.8CVSS6.9AI score0.06377EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2020/08/08 9:15 p.m.•30 views

CVE-2020-15827

In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file...

7.5CVSS7.8AI score0.00691EPSS
SaveExploits0References2
Prion
Prion
•added 2020/08/08 9:15 p.m.•30 views

Code injection

In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file...

5CVSS7.5AI score0.00691EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/08/08 8:24 p.m.•41 views

CVE-2020-15827

In JetBrains ToolBox version 1.17 before 1.17.6856, the set of signature verifications omitted the jetbrains-toolbox.exe file...

7.9AI score0.00691EPSS
SaveExploits0References2
Rows per page
Query Builder