Security Advisories for January-May, 2024
Our deepest apologies for the lack of content on this board so far this year. There was a bug preventing us from posting on this board, but that has now been fixed. Please find the SAs that have come ...
Blog Articles
SA-2023-122 - SM2 decryption code (CVE-2021-3711)
Summary A bug in the SM2 decryption code can cause a buffer overflow when the application calls EVP_PKEY_decrypt() with a smaller buffer size. This could lead to malicious attackers altering the conte...
SA-2023-121 - MySQL InnoDB repeatable crash (CVE-2021-35604)
Summary MySQL Server, specifically InnoDB, is vulnerable to a high-privileged attacker who can compromise it through multiple protocols, allowing unauthorized access to data, potentially leading to a ...
- FredrikB-NN2 on: SA-2023-103 - Privilege escalation via Redis serve...
- ACollins on: SA-2023-091 - OpenSSH information leak (CVE-2020-1...
- CraigW on: SA-2023-023 - OpenSSL c_rehash script (CVE-2022-20...
- AntonioP on: Security Advisory - SA-2022-007 - TLS Heap Overflo...
-
SamPirok
on:
Security Advisory: SA-2022-004 – Spring Framework
- Danny_Schaper on: Security Advisory - SA-2022-003 - "Spring4Shell" (...
- StephanH on: Vulnerability Notice VN-2021-460- "FragAttacks" Wi...
