advanced package tool vulnerabilities and exploits

(subscribe to this query)

NA

Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_generate_key() to generate an X9.42 DH key may experience long delays. Likewise, applications...

Openssl Openssl

1 Github repository

NA

Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex() or EVP_PKEY_param_check() to check a DH key or DH parameters may experience long delays. Where the key or parameters that...

Openssl Openssl 1.0.2 Openssl Openssl 1.1.1 Openssl Openssl 3.0.0 Openssl Openssl 3.1.1 Openssl Openssl 3.1.0

NA

The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments a...

Openssl Openssl Stormshield Stormshield Network Security

1 Github repository

NA

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of ...

Openssl Openssl Stormshield Stormshield Network Security Stormshield Endpoint Security Stormshield Sslvpn

1 Github repository

NA

The public API function BIO_new_NDEF is a helper function used for streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. The function receive...

Openssl Openssl Stormshield Stormshield Management Center

1 Github repository

NA

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This ...

Openssl Openssl Stormshield Stormshield Network Security Stormshield Stormshield Management Center

4 Github repositories

NA

A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged atta...

Linux Linux Kernel Linux Linux Kernel 3.13 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

2 Github repositories

NA

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.

Linux Linux Kernel 2.6.12 Linux Linux Kernel Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04

NA

A data leak flaw was found in the way XFS_IOC_ALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them.

Linux Linux Kernel

1 Github repository

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook