Lucene search
FreeBSD8337251B-B07B-11EE-B0D7-84A93843EB75HistoryJan 09, 2024 - 12:00 a.m.
OpenSSL -- Vector register corruption on PowerPC
2024-01-0900:00:00
vuxml.freebsd.org
23
openssl
poly1305
bug
internal state
applications
powerpc cpu
vector instructions
unix
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
AI Score
7.5
Confidence
Low
EPSS
0.002
Percentile
52.7%
SO-AND-SO reports:
The POLY1305 MAC (message authentication code) implementation
contains a bug that might corrupt the internal state of applications running
on PowerPC CPU based platforms if the CPU provides vector instructions.
References
Related
ubuntucve
ubuntucve
CVE-2023-6129
2024-01-09 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-6129 affecting package cloud-hypervisor-cvm for versions less than 38.0.72.2-1
2024-07-12 23:39:02
CVE-2023-6129 affecting package openssl for versions less than 3.3.0-1
2024-05-17 21:38:35
CVE-2023-6129 affecting package nodejs for versions less than 20.14.0-1
2024-06-21 09:32:44
nessus
nessus
redhatcve
redhatcve
CVE-2023-6129
2024-01-10 05:31:28
ibm
ibm
osv
osv
CGA-gmc7-prpg-3wrh
2024-06-06 12:27:30
CVE-2023-6129
2024-01-09 17:15:12
CGA-9vq3-7h7g-3qcp
2024-09-25 05:19:45
prion
prion
Design/Logic Flaw
2024-01-09 17:15:00
veracode
veracode
Out-of-bounds Write
2024-01-30 19:15:17
openvas
openvas
OpenSSL Vector Register Corruption Vulnerability (20240109)
2024-01-09 00:00:00
openSUSE: Security Advisory for openssl (SUSE-SU-2024:0172-1)
2024-03-04 00:00:00
openSUSE: Security Advisory for openssl (SUSE-SU-2024:0518-1)
2024-03-04 00:00:00
f5
f5
K000138198 : OpenSSL vulnerability CVE-2023-6129
2024-01-11 00:00:00
cvelist
cvelist
debiancve
debiancve
CVE-2023-6129
2024-01-09 17:15:12
openssl
openssl
alpinelinux
alpinelinux
CVE-2023-6129
2024-01-09 17:15:12
cve
cve
CVE-2023-6129
2024-01-09 17:15:12
nvd
nvd
CVE-2023-6129
2024-01-09 17:15:12
mageia
mageia
Updated quictls packages fix security vulnerabilities
2024-02-15 02:02:34
Updated openssl packages fix security vulnerabilities
2024-02-04 05:49:27
Updated quictls packages fix security vulnerabilities
2024-08-19 22:12:14
cloudfoundry
cloudfoundry
USN-6622-1: OpenSSL vulnerabilities | Cloud Foundry
2024-02-29 00:00:00
aix
aix
ubuntu
ubuntu
OpenSSL vulnerabilities
2024-02-05 00:00:00
oraclelinux
oraclelinux
openssl and openssl-fips-provider security update
2024-05-03 00:00:00
almalinux
almalinux
Low: openssl and openssl-fips-provider security update
2024-04-30 00:00:00
redhat
redhat
(RHSA-2024:2447) Low: openssl and openssl-fips-provider security update
2024-04-30 06:15:44
(RHSA-2024:2933) Important: logging for Red Hat OpenShift security update
2024-05-23 06:15:17
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
AI Score
7.5
Confidence
Low
EPSS
0.002
Percentile
52.7%
Related for 8337251B-B07B-11EE-B0D7-84A93843EB75