netapp converged systems advisor agent - vulnerabilities and exploits

(subscribe to this query)

An issue exists in compare_digest in Lib/hmac.py in Python up to and including 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.

Python Python Debian Debian Linux 10.0 Netapp Active Iq Unified Manager -Netapp Converged Systems Advisor Agent -

A timing side-channel in the handling of RSA ClientKeyExchange messages exists in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker woul...

Gnu Gnutls 3.6.8-11.el8 2 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 36 Fedoraproject Fedora 37 Fedoraproject Fedora 38 Netapp Ontap Select Deploy Administration Utility -Netapp Active Iq Unified Manager -Netapp Converged Systems Advisor Agent -

A security regression of CVE-2019-9636 exists in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4 through v3.8.0b1, which still allows an malicious user to exploit CVE-2019-9636 by abusing the user and password p...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook