wolfssl

wolfSSL 嵌入式 SSL/TLS 库 wolfSSL 嵌入式 SSL 库（原名 CyaSSL）是一个用 ANSI C 编写的轻量级 SSL/TLS 库，主要面向嵌入式、RTOS 和资源受限环境——这主要归功于其体积小、速度快和功能丰富。由于免版税定价和出色的跨平台支持，它也常用于标准操作系统环境。wolfSSL 支持直至当前 TLS 1.3 和 DTLS 1.3 的行业标准，体积比 OpenSSL 小最多 20 倍，并提供 ChaCha20、Curve25519、BLAKE2b/BLAKE2s 以及后量子 TLS 1.3 组等先进密码算法。用户基准测试和反馈报告显示，使用...

Mageia: Security Advisory (MGASA-2014-0315)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4296-1 : mbedtls - security update

Two vulnerabilities were discovered in mbedtls, a lightweight crypto and SSL/TLS library which could result in plain text recovery via side-channel attacks. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-429...

Debian DSA-4147-1 : polarssl - security update

Several vulnerabilities were discovered in PolarSSL, a lightweight crypto and SSL/TLS library, that allowed a remote attacker to either cause a denial-of-service by application crash, or execute arbitrary code. C Tenable Network Security, Inc. The descriptive text and package checks in this plugi...

Debian: Security Advisory (DSA-4147-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2981-1 : polarssl - security update

A flaw was discovered in PolarSSL, a lightweight crypto and SSL/TLS library, which can be exploited by a remote unauthenticated attacker to mount a denial of service against PolarSSL servers that offer GCM ciphersuites. Potentially clients are affected too if a malicious server decides to execute...

Microsoft Windows multiple security vulnerabilities

Print spooler service code execution, XML library integer overflow and memory corruption, multiple .Net vulnerabilities, Win32K privilege escalation SSL/TLS library protection bypass, Open Data Protocol DoS...

US-CERT Technical Cyber Security Alert TA04-078A -- Multiple Vulnerabilities in OpenSSL

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Technical Cyber Security Alert TA04-078A Multiple Vulnerabilities in OpenSSL Original release date: March 18, 2004 Last revised: -- Source: US-CERT Systems Affected Applications and systems that use the OpenSSL SSL/TLS library Overview Several...