QEMU 'xilinx_ethlite.c' heap buffer overflow vulnerability

QEMU is a simulation processor software developed by French programmer Fabrice Bellard. The software is fast and cross-platform. QEMU 'xilinxethlite.c' suffers from a heap buffer overflow vulnerability that allows an attacker to exploit the vulnerability to execute arbitrary code on the host, a...

CVE-2010-0928

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...

CVE-2010-0928

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...

CVE-2010-0928

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...

CVE-2010-0928

Removed by vendor...

CVE-2010-0928

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...

CVE-2010-0928

CVEs and details: CVE-2010-0928 affects OpenSSL 0.9.8i on the Gaisler LEON3 SoC (Xilinx Virtex-II Pro FPGA). The root cause is a Fixed Width Exponentiation (FWE) implementation that does not verify the signature before returning it, enabling a physically proximate attacker to recover the private ...