Summary Parsing CMS AuthEnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow. A stack buffer overflow may lead to a crash, causing Denial of Service, or p...
Summary Out-of-bounds read/write flaw in OpenSSL’s RFC 3211 KEK unwrap function, affecting CMS decryption with password-based encryption. Malicious inputs could trigger denial of service or, in rare c...
Summary In the Linux kernel, the following has been resolved: crypto: algif_aead - Revert to operating out-of-place. This mostly reverts commit 72548b093ee3 except for the copying of the associated da...
SamPirok
on:
Security Advisory: SA-2022-004 – Spring Framework
