Debian DLA-1999-1 : symfony security update

Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code execution via unserialization. For Debian 8 'Jessie', these problems have been fixed in version 2.3.21+dfsg-4+deb8u6. We recommend that you upgra...

Debian: Security Advisory (DSA-4573-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-4573-1 : symfony - security update

Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code execution via unserialization. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

DEBIAN-CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

AZL-44412 CVE-2016-1000236 affecting package nodejs-nodemon 2.0.3-5

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

Type confusion

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

UBUNTU-CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used...

CVE-2016-1000236

CVE-2016-1000236 affects the node-cookie-signature package prior to v1.0.6. Root cause: a timing-attack due to a non-constant-time comparison in signature verification. Impact: under favorable network conditions, an attacker could deduce the secret by exploiting slight timing differences (per-cha...

[SECURITY] [DLA 1999-1] symfony security update

Package : symfony Version : 2.3.21+dfsg-4+deb8u6 CVE ID : CVE-2019-18886 CVE-2019-18887 CVE-2019-18888 Multiple vulnerabilities have been found in the Symfony PHP framework which could lead to a timing attack/information leak, argument injection and code execution via unserialization. For Debian ...

Timing Attack

simplito/elliptic-php is vulnerable to timing attack. The bit-length of the scalar is leaked during scalar multiplication on an elloptic curve, which can result in the recovery of the long-term private key generated by the library, due to inconsistent time during generation...

[SECURITY] [DSA 4573-1] symfony security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4573-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 18, 2019 https://www.debian.org/security/faq -...

Timing Attack

Overview simplito/elliptic-php is a Fast, general Elliptic Curve Cryptography library. Affected versions of this package are vulnerable to Timing Attack. Practical recovery of the long-term private key generated by the library is possible under certain conditions. Leakage of a bit-length of the...

CVE-2019-16863

STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL...

Code injection

STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL...

CVE-2019-16863

STMicroelectronics ST33TPHF2ESPI TPM devices before 2019-09-12 allow attackers to extract the ECDSA private key via a side-channel timing attack because ECDSA scalar multiplication is mishandled, aka TPM-FAIL...

CVE-2019-16863

CVE-2019-16863 affects STMicroelectronics ST33TPHF2ESPI TPM devices. The vulnerability stems from a side-channel timing flaw in ECDSA scalar multiplication, allowing an attacker to extract parts of the ECDSA private key. Impact is limited to affected TPM firmware prior to 2019-09-12; exploitation...