Linux Distros Unpatched Vulnerability : CVE-2021-37155

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP...

PYSEC-2025-27

The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for Python. The OCSP response cache uses pickle as the...

The vulnerability in the implementation of the Online Certificate Status Protocol (OCSP) on Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Online Certificate Status Protocol OCSP implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

...

PT-2024-6849 · Microsoft · Windows Ocsp Server +1

Name of the Vulnerable Software and Affected Versions: Windows Online Certificate Status Protocol OCSP Server affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the implementation of the Online Certificate Status Protocol OCSP in Windo...

curl 安全漏洞

curl is a cURL open source tool for transferring data from or to a server. A security vulnerability exists in curl versions 7.41.0 through 8.9.1 that stems from an inability to detect certain OCSP issues...

The vulnerability in the implementation of the Online Certificate Status Protocol (OCSP) on Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Online Certificate Status Protocol OCSP implementation in Windows operating systems is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

CVE-2024-38031

Windows Online Certificate Status Protocol OCSP Server Denial of Service Vulnerability...

CVE-2024-38067 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

...

CVE-2024-38068 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

...

CVE-2024-38031 Windows Online Certificate Status Protocol (OCSP) Server Denial of Service Vulnerability

...

PT-2024-4854 · Microsoft · Windows Ocsp Server +1

Name of the Vulnerable Software and Affected Versions: Windows Online Certificate Status Protocol OCSP Server affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the implementation of the Online Certificate Status Protocol OCSP in Windo...

Microsoft Windows Online Certificate Status Protocol Resource Management Error Vulnerability

Microsoft Windows Online Certificate Status Protocol is a network protocol for verifying the status of digital certificates from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP. An attacker could exploit this...

PT-2024-4785 · Microsoft · Windows Ocsp Server +1

Name of the Vulnerable Software and Affected Versions: Windows Online Certificate Status Protocol OCSP Server affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the implementation of the Online Certificate Status Protocol OCSP in Windows...

Microsoft Windows Online Certificate Status Protocol Security Vulnerability

Microsoft Windows Online Certificate Status Protocol is a network protocol for verifying the status of digital certificates from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP. An attacker could exploit this vulnerability to...

Microsoft Windows Online Certificate Status Protocol Security Vulnerability

Microsoft Windows Online Certificate Status Protocol is a network protocol for verifying the status of digital certificates from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP. An attacker could exploit this vulnerability to...

PT-2024-4761 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the implementation of the Online Certificate Status Protocol OCSP in Windows. This can be exploited by a remote attacker to...

PT-2024-2960 · Hashicorp +1 · Vault Enterprise +2

Name of the Vulnerable Software and Affected Versions: Vault versions 1.14.0 through 1.15.6 Vault Enterprise versions 1.14.0 through 1.14.10 and 1.15.0 through 1.15.6 Description: The issue is related to the incorrect validation of OCSP responses when one or more OCSP sources are configured in th...

[SECURITY] Fedora 40 Update: dogtag-pki-11.5.0-3.fc40

Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. Dogtag PKI consists of the following components: Certificate Authority CA Key Recovery Authority KRA Online Certificate Status Protocol OCSP Manager Token Key Service TKS Token...

OCSP verification bypass with TLS session reuse

curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...