Search CVE reports
51 – 60 of 50776 results
[Unknown description]
1 affected package
xen
| Package | 16.04 LTS |
|---|---|
| xen | Needs evaluation |
[Unknown description]
1 affected package
xen
| Package | 16.04 LTS |
|---|---|
| xen | Needs evaluation |
[Unknown description]
1 affected package
xen
| Package | 16.04 LTS |
|---|---|
| xen | Needs evaluation |
[Unknown description]
1 affected package
xen
| Package | 16.04 LTS |
|---|---|
| xen | Needs evaluation |
Issue summary: A malicious server can exploit TLS OCSP stapling by delivering a crafted response through the status_request extension, triggering a double-free in the client's certificate verification path. Impact summary:...
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 16.04 LTS |
|---|---|
| edk2 | — |
| nodejs | — |
| openssl | Not affected |
| openssl-fips | — |
| openssl1.0 | — |
Issue summary: Remote peer may exhaust heap memory of the QUIC server or client by flooding it with packets containing PATH_CHALLENGE frames. Impact summary: A malicious remote peer can cause an unbounded memory allocation which...
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 16.04 LTS |
|---|---|
| edk2 | — |
| nodejs | — |
| openssl | Not affected |
| openssl-fips | — |
| openssl1.0 | — |
Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fields of AuthEnvelopedData containers, leading to various potential compromises. Impact...
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 16.04 LTS |
|---|---|
| edk2 | — |
| nodejs | — |
| openssl | Not affected |
| openssl-fips | — |
| openssl1.0 | — |
Issue Summary: The PKCS#12 file processing fails to perform sufficient input validation for files that use Password-Based Message Authentication Code 1 (PBMAC1) integrity mechanism allowing a certificate and private...
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 16.04 LTS |
|---|---|
| edk2 | — |
| nodejs | — |
| openssl | Not affected |
| openssl-fips | — |
| openssl1.0 | — |
Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap...
5 affected packages
edk2, nodejs, openssl, openssl-fips, openssl1.0
| Package | 16.04 LTS |
|---|---|
| edk2 | — |
| nodejs | — |
| openssl | Fixed |
| openssl-fips | — |
| openssl1.0 | — |
A security vulnerability has been detected in tmux up to 3.6a. Affected is the function image_free of the file image.c. Such manipulation leads to use after free. Local access is required to approach this attack. This attack is...
1 affected package
tmux
| Package | 16.04 LTS |
|---|---|
| tmux | Not affected |