2113 matches found
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...
CVE-2026-57826
openHiTLS versions 0.2.0 through 0.3.2 contain a critical vulnerability (CVSS 9.8 ) in X.509 certificate chain verification . The basic constraints extension and CA flag of intermediate CAs are only validated for v3 certificates; v1 and v2 certificates are silently ignored, allowing an attacker t...
CVE-2026-8763
A flaw was found in Bouncy Castle for Java, a cryptographic library. An attacker can exploit this vulnerability by manipulating rfc822Name and URI fields within X.509 certificates using a trailing dot. This bypasses Name Constraints, potentially leading to spoofing or unauthorized access. Such an...
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...
Linux Distros Unpatched Vulnerability : CVE-2026-15554
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared- secret authentication. This enables an unauthenticated...
crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries
A flaw was found in the crypto/x509 package of golang. This vulnerability allows a remote attacker to cause a Denial of Service DoS by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name SAN entries. The certificate verification process, specifical...
CVE-2026-15554
the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...
nodejs: Nodejs memory leak
A resource consumption flaw has been discovered in NodeJS. A memory leak in Node.js’s OpenSSL integration occurs when converting X.509 certificate fields to UTF-8 without freeing the allocated buffer. When applications call socket.getPeerCertificatetrue, each certificate field leaks memory,...
CVE-2009-4914
Memory leak on Cisco Adaptive Security Appliances ASA 5580 series devices with software before 8.12 allows remote attackers to cause a denial of service memory consumption via Subject Alternative Name fields in an X.509 certificate, aka Bug ID CSCsq17879...
CVE-2017-18911
An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. The X.509 certificate validation can be skipped for a TLS-based e-mail server...
CVE-2013-6682
The phone-proxy implementation in Cisco Adaptive Security Appliance ASA Software 9.0.3.6 and earlier does not properly validate X.509 certificates, which allows remote attackers to cause a denial of service connection-database corruption via an invalid entry, aka Bug ID CSCui33299...
EUVD-2018-10288
Malware in sbrugna...
EUVD-2014-7299
Malware in sbrugna...
EUVD-2012-6314
Malware in sbrugna...
EUVD-2009-2469
Malware in sbrugna...
EUVD-2012-0773
Malware in sbrugna...
EUVD-2011-0108
Malware in sbrugna...
EUVD-2014-6884
Malware in sbrugna...