Lucene search
K

68 matches found

OSV
OSV
added 2016/05/23 7:59 p.m.6 views

UBUNTU-CVE-2016-3959

The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service infinite loop via a crafted public key to a program that uses HTTPS client...

7.5CVSS6.8AI score0.04335EPSS
Exploits0References4
Cvelist
Cvelist
added 2016/05/23 7:0 p.m.24 views

CVE-2016-3959

The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service infinite loop via a crafted public key to a program that uses HTTPS client...

7.2AI score0.04335EPSS
Exploits0References9
CVE
CVE
added 2016/05/23 7:0 p.m.75 views

CVE-2016-3959

CVE-2016-3959 affects Go before 1.5.4 and 1.6.x before 1.6.1. The Verify function in crypto/dsa/dsa.go does not properly validate parameters passed to the big integer library, potentially allowing a remote attacker to cause a denial of service (infinite loop) via a crafted public key in applicati...

7.5CVSS7.1AI score0.04335EPSS
Exploits0References9Affected Software1
UbuntuCve
UbuntuCve
added 2016/01/13 3:59 p.m.28 views

CVE-2016-1494

The verify function in the RSA package for Python Python-RSA before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack...

5.3CVSS6.4AI score0.07054EPSS
Exploits1References2
Prion
Prion
added 2016/01/13 3:59 p.m.21 views

Design/Logic Flaw

The verify function in the RSA package for Python Python-RSA before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack...

5CVSS6.7AI score0.07054EPSS
Exploits1References8Affected Software4
Cvelist
Cvelist
added 2016/01/13 3:0 p.m.24 views

CVE-2016-1494

The verify function in the RSA package for Python Python-RSA before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack...

5.3AI score0.07054EPSS
Exploits1References8
CVE
CVE
added 2016/01/13 3:0 p.m.101 views

CVE-2016-1494

The CVE-2016-1494 issue affects the Python-RSA library’s verify function prior to version 3.3, enabling a Bleichenbacher ’06 style attack to forge signatures with a small public exponent via crafted padding (BERserk). This can allow an attacker to spoof valid signatures for the affected RSA keys....

5.3CVSS5.2AI score0.07054EPSS
Exploits1References8Affected Software1
Cvelist
Cvelist
added 2007/05/09 10:0 p.m.18 views

CVE-2007-2585

Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 BarcodeWiz.dll allows remote attackers to execute arbitrary code via a long argument...

8.1AI score0.06541EPSS
Exploits0References7
Rows per page
Query Builder