Lucene search
K

17 matches found

F5 Networks
F5 Networks
added 2023/02/21 6:52 p.m.38 views

K01251345: OpenSSL vulnerability CVE-2020-1967

Security Advisory Description Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or...

7.5CVSS6.4AI score0.60769EPSS
Exploits2
Github Security Blog
Github Security Blog
added 2021/08/25 8:45 p.m.42 views

Null pointer deference in openssl-src

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5CVSS7.4AI score0.60769EPSS
Exploits2References35Affected Software1
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2020:1058-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.60769EPSS
Exploits2References4
Tenable Nessus
Tenable Nessus
added 2020/07/17 12:0 a.m.37 views

MySQL Enterprise Monitor 4.0.x < 4.0.13.5349 / 8.0.x < 8.0.21.1240 (Jul 2020 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 4.0.x prior to 4.0.13.5349 or 8.0.x prior to 8.0.21.1240. It is, therefore, affected by multiple vulnerabilities: - A buffer overflow condition exists in the Montgomery squaring procedur...

7.5CVSS7.7AI score0.60769EPSS
Exploits2References3
OSV
OSV
added 2020/04/25 12:0 p.m.35 views

RUSTSEC-2020-0015 Crash causing Denial of Service attack

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5CVSS7.5AI score0.60769EPSS
Exploits2References3
RustSec
RustSec
added 2020/04/25 12:0 p.m.39 views

Crash causing Denial of Service attack

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5CVSS2.7AI score0.60769EPSS
Exploits2Affected Software1
OpenVAS
OpenVAS
added 2020/04/22 12:0 a.m.99 views

OpenSSL: Segmentation fault in SSL_check_chain (CVE-2020-1967) - Windows

OpenSSL server or client applications are prone to a denial-of-service vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.7AI score0.60769EPSS
Exploits2References2
OpenVAS
OpenVAS
added 2020/04/22 12:0 a.m.103 views

OpenSSL: Segmentation fault in SSL_check_chain (CVE-2020-1967) - Linux

OpenSSL server or client applications are prone to a denial-of-service vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS7.7AI score0.60769EPSS
Exploits2References2
CNVD
CNVD
added 2020/04/22 12:0 a.m.7 views

OpenSSL Code Issues Vulnerabilities

OpenSSL is an open source capable general-purpose cryptographic library from the OpenSSL team that implements the Secure Sockets Layer SSLv2/v3 and Secure Transport Layer TLSv1 protocols. The product supports a variety of cryptographic algorithms , including symmetric ciphers , hash algorithms ,...

7.5CVSS7.9AI score0.60769EPSS
Exploits2References1
NVD
NVD
added 2020/04/21 2:15 p.m.24 views

CVE-2020-1967

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5CVSS7.3AI score0.60769EPSS
Exploits2References32
OSV
OSV
added 2020/04/21 2:15 p.m.27 views

CVE-2020-1967

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5CVSS7.4AI score0.60769EPSS
Exploits2References32
Prion
Prion
added 2020/04/21 2:15 p.m.41 views

Null pointer dereference

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

5CVSS7.2AI score0.60769EPSS
Exploits2References32Affected Software19
Debian CVE
Debian CVE
added 2020/04/21 1:45 p.m.39 views

CVE-2020-1967

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5CVSS6.4AI score0.60769EPSS
Exploits2
Cvelist
Cvelist
added 2020/04/21 1:45 p.m.23 views

CVE-2020-1967 Segmentation fault in SSL_check_chain

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5AI score0.60769EPSS
Exploits2References32
AlpineLinux
AlpineLinux
added 2020/04/21 1:45 p.m.46 views

CVE-2020-1967

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5CVSS7.6AI score0.60769EPSS
Exploits2
OpenSSL
OpenSSL
added 2020/04/21 12:0 a.m.84 views

Vulnerability in OpenSSL - Segmentation fault in SSL_check_chain

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the “signaturealgorithmscert” TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5AI score0.60769EPSS
Exploits2Affected Software1
UbuntuCve
UbuntuCve
added 2020/04/21 12:0 a.m.27 views

CVE-2020-1967

Server or client applications that call the SSLcheckchain function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect handling of the "signaturealgorithmscert" TLS extension. The crash occurs if an invalid or unrecognised signature algorithm i...

7.5CVSS6.7AI score0.60769EPSS
Exploits2References2
Rows per page
Query Builder