219 matches found
CVE-2024-38068: Uncontrolled Resource Consumption
Windows Online Certificate Status Protocol OCSP Server Denial of Service Vulnerability...
Microsoft Windows Online Certificate Status Protocol Resource Management Error Vulnerability
Microsoft Windows Online Certificate Status Protocol is a network protocol for verifying the status of digital certificates from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP. An attacker could exploit this...
CVE-2024-38067: Uncontrolled Resource Consumption
Windows Online Certificate Status Protocol OCSP Server Denial of Service Vulnerability...
PT-2024-4761 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the implementation of the Online Certificate Status Protocol OCSP in Windows. This can be exploited by a remote attacker to...
Microsoft Windows Online Certificate Status Protocol Security Vulnerability
Microsoft Windows Online Certificate Status Protocol is a network protocol for verifying the status of digital certificates from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP. An attacker could exploit this vulnerability to...
PT-2024-4785 · Microsoft · Windows Ocsp Server +1
Name of the Vulnerable Software and Affected Versions: Windows Online Certificate Status Protocol OCSP Server affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the implementation of the Online Certificate Status Protocol OCSP in Windows...
Microsoft Windows Online Certificate Status Protocol Security Vulnerability
Microsoft Windows Online Certificate Status Protocol is a network protocol for verifying the status of digital certificates from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP. An attacker could exploit this vulnerability to...
CVE-2024-38031: Uncontrolled Resource Consumption
Windows Online Certificate Status Protocol OCSP Server Denial of Service Vulnerability...
PT-2024-2960 · Hashicorp +1 · Vault Enterprise +2
Name of the Vulnerable Software and Affected Versions: Vault versions 1.14.0 through 1.15.6 Vault Enterprise versions 1.14.0 through 1.14.10 and 1.15.0 through 1.15.6 Description: The issue is related to the incorrect validation of OCSP responses when one or more OCSP sources are configured in th...
[SECURITY] Fedora 40 Update: dogtag-pki-11.5.0-3.fc40
Dogtag PKI is an enterprise software system designed to manage enterprise Public Key Infrastructure deployments. Dogtag PKI consists of the following components: Certificate Authority CA Key Recovery Authority KRA Online Certificate Status Protocol OCSP Manager Token Key Service TKS Token...
OCSP verification bypass with TLS session reuse
curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...
Online Certificate Status Protocol Code Execution
The vulnerability of the Online Certificate Status Protocol OCSP implementation in Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Online Certificate Status Protocol Unauthorized Access
The vulnerability of the Online Certificate Status Protocol OCSP implementation in Windows operating systems is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2024-20655
Microsoft Online Certificate Status Protocol OCSP Remote Code Execution Vulnerability...
CVE-2024-20655
Microsoft Online Certificate Status Protocol OCSP Remote Code Execution Vulnerability...
Remote code execution
Microsoft Online Certificate Status Protocol OCSP Remote Code Execution Vulnerability...
CVE-2024-20655 Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability
...
Microsoft Windows Online Certificate Status Protocol Security Vulnerability
Microsoft Windows is a suite of operating systems for personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows Online Certificate Status Protocol OCSP. An attacker exploiting this vulnerability could gain access to sensitive information. The...
PT-2024-1036 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Online Certificate Status Protocol OCSP in Windows operating systems, which lacks sufficient protection of service data. This can allow a...