VDB

GCVE-110-MAGEIA-2024-20

GCVE-110-MAGEIA-2024-20
Advisory Published
Vulnetix · Advisory published February 4, 2024
The updated packages fix security vulnerabilities: Excessive time spent in DH check / generation with large Q parameter value. (CVE-2023-5678) POLY1305 MAC implementation corrupts vector registers on PowerPC. (CVE-2023-6129) Excessive time spent checking invalid RSA public keys. (CVE-2023-6237) PKCS12 Decoding crashes. (CVE-2024-0727)

Affected Products

VendorProductVersionsPlatforms
Mageiaopencpn-squiddio-plugin1.3.91.0-1.mga9 (unaffected), 0 (affected)—
Mageiaopenssl0 (affected), 3.0.12-1.1.mga9 (unaffected), 0 (affected), 3.0.12-1.1.mga9 (unaffected)—

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›