Search CVE reports
341 – 350 of 50428 results
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.
1 affected package
golang-golang-x-net-dev
| Package | 16.04 LTS |
|---|---|
| golang-golang-x-net-dev | Needs evaluation |
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression...
1 affected package
nginx
| Package | 16.04 LTS |
|---|---|
| nginx | Needs evaluation |
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
4 affected packages
golang-go.crypto, snapd, lxd, google-guest-agent
| Package | 16.04 LTS |
|---|---|
| golang-go.crypto | Needs evaluation |
| snapd | Needs evaluation |
| lxd | Needs evaluation |
| google-guest-agent | — |
An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.
4 affected packages
golang-go.crypto, snapd, lxd, google-guest-agent
| Package | 16.04 LTS |
|---|---|
| golang-go.crypto | Needs evaluation |
| snapd | Needs evaluation |
| lxd | Needs evaluation |
| google-guest-agent | — |
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.
4 affected packages
golang-go.crypto, snapd, lxd, google-guest-agent
| Package | 16.04 LTS |
|---|---|
| golang-go.crypto | Needs evaluation |
| snapd | Needs evaluation |
| lxd | Needs evaluation |
| google-guest-agent | — |
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.
4 affected packages
golang-go.crypto, snapd, lxd, google-guest-agent
| Package | 16.04 LTS |
|---|---|
| golang-go.crypto | Needs evaluation |
| snapd | Needs evaluation |
| lxd | Needs evaluation |
| google-guest-agent | — |
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking...
4 affected packages
golang-go.crypto, snapd, lxd, google-guest-agent
| Package | 16.04 LTS |
|---|---|
| golang-go.crypto | Needs evaluation |
| snapd | Needs evaluation |
| lxd | Needs evaluation |
| google-guest-agent | — |
When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress....
4 affected packages
golang-go.crypto, snapd, lxd, google-guest-agent
| Package | 16.04 LTS |
|---|---|
| golang-go.crypto | Needs evaluation |
| snapd | Needs evaluation |
| lxd | Needs evaluation |
| google-guest-agent | — |
The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that...
4 affected packages
golang-go.crypto, snapd, lxd, google-guest-agent
| Package | 16.04 LTS |
|---|---|
| golang-go.crypto | Needs evaluation |
| snapd | Needs evaluation |
| lxd | Needs evaluation |
| google-guest-agent | — |
When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted...
4 affected packages
golang-go.crypto, snapd, lxd, google-guest-agent
| Package | 16.04 LTS |
|---|---|
| golang-go.crypto | Needs evaluation |
| snapd | Needs evaluation |
| lxd | Needs evaluation |
| google-guest-agent | — |