Lucene search
MitreCVELIST:CVE-2018-16253HistoryNov 07, 2018 - 8:00 p.m.
CVE-2018-16253
2018-11-0720:00:00
mitre
www.cve.org
6
In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly verify the ASN.1 metadata. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation through fake X.509 certificates. This is an even more permissive variant of CVE-2006-4790 and CVE-2014-1568.
Related
nvd
nvd
prion
prion
Code injection
2018-11-07 20:29:00
Design/Logic Flaw
2018-09-26 21:29:00
Design/Logic Flaw
2014-09-25 17:55:00
debiancve
debiancve
cve
cve
osv
osv
CVE-2018-16253
2018-11-07 20:29:00
CVE-2018-16152
2018-09-26 21:29:01
nss - security update
2014-09-25 00:00:00
redhatcve
redhatcve
CVE-2018-16152
2018-10-03 20:20:39
ubuntucve
ubuntucve
alpinelinux
alpinelinux
CVE-2018-16152
2018-09-26 21:29:01
cvelist
cvelist
openvas
openvas
Gentoo Security Advisory GLSA 200609-15 (gnutls)
2008-09-24 00:00:00
Debian Security Advisory DSA 1182-1 (gnutls11)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-1182-1)
2008-01-17 00:00:00
nessus
nessus
FreeBSD : gnutls -- RSA Signature Forgery Vulnerability (64bf6234-520d-11db-8f1a-000a48049292)
2006-10-05 00:00:00
Debian DSA-1182-1 : gnutls11 - cryptographic weakness
2006-10-14 00:00:00
openSUSE 10 Security Update : gnutls (gnutls-2118)
2007-10-17 00:00:00
freebsd
freebsd
gnutls -- RSA Signature Forgery Vulnerability
2006-09-08 00:00:00
NSS -- RSA Signature Forgery
2014-09-23 00:00:00
chromium -- RSA signature malleability in NSS
2014-09-24 00:00:00
gentoo
gentoo
GnuTLS: RSA Signature Forgery
2006-09-26 00:00:00
centos
centos
gnutls security update
2006-09-14 14:44:53
nss security update
2014-09-26 11:29:24
debian
debian
[SECURITY] [DSA 1182-1] New gnutls11 packages fix RSA signature forgery cryptographic weakness
2006-09-22 15:34:35
[SECURITY] [DSA 3037-1] icedove security update
2014-09-26 19:31:43
[SECURITY] [DLA 62-1] nss security update
2014-09-25 14:59:30
oraclelinux
oraclelinux
Important gnutls security update
2006-11-30 00:00:00
nss security update
2014-09-26 00:00:00
nss, nss-util, and nss-softokn security, bug fix, and enhancement update
2014-12-02 00:00:00
redhat
redhat
(RHSA-2006:0680) gnutls security update
2006-09-14 00:00:00
(RHSA-2014:1371) Important: nss security update
2014-10-10 00:00:00
(RHSA-2014:1307) Important: nss security update
2014-09-26 00:00:00
ubuntu
ubuntu
GnuTLS vulnerability
2006-09-19 00:00:00
Firefox vulnerabilities
2014-09-24 00:00:00
NSS vulnerability
2014-09-24 00:00:00
securityvulns
securityvulns
[USN-348-1] GnuTLS vulnerability
2006-09-19 00:00:00
suse
suse
Security update for mozilla-nss (important)
2014-09-30 01:04:19
Security update for mozilla-nss (important)
2014-10-01 17:04:53
NSS update to avoid signature forgery (critical)
2014-09-28 12:04:18
cert
cert
mozilla
mozilla
RSA Signature Forgery in NSS — Mozilla
2014-09-24 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Network Security Services RSA Signature Forgery (CVE-2014-1568)
2014-10-19 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: nss-softokn-3.17.1-2.fc21
2014-09-29 04:00:06
[SECURITY] Fedora 21 Update: nss-3.17.1-1.fc21
2014-09-29 04:00:07
[SECURITY] Fedora 21 Update: nss-util-3.17.1-1.fc21
2014-09-29 04:00:07
amazon
amazon
Important: nss-util
2014-10-01 16:32:00
Important: nss-softokn
2014-10-01 16:32:00
Important: nss
2014-10-01 16:32:00
veracode
veracode
Spoofable RSA Signatures
2019-01-15 09:01:59
archlinux
archlinux
NSS: Signature forgery attack
2014-09-24 00:00:00
mageia
mageia
Updated nss packages fix CVE-2014-1568
2014-09-26 19:55:04
chrome
chrome
Stable Channel Update
2014-09-24 00:00:00
