Lucene search
RedosROS-20240410-23HistoryApr 10, 2024 - 12:00 a.m.
ROS-20240410-23
2024-04-1000:00:00
redos.red-soft.ru
9
opencryptoki
rsa pkcs1
augmented ciphertexts
remote access
unauthorized access
protected information
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
40.6%
A vulnerability in the opencryptoki package is related to the processing of RSA PKCS#1 augmented ciphertexts.
Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized
access to protected information
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| redos | 7.3 | x86_64 | opencryptoki | < 3.22.0-1 | UNKNOWN |
Related
nessus
nessus
RHEL 6 : opencryptoki (Unpatched Vulnerability)
2024-05-11 00:00:00
AlmaLinux 8 : opencryptoki (ALSA-2024:1608)
2024-04-03 00:00:00
RHEL 7 : opencryptoki (Unpatched Vulnerability)
2024-05-11 00:00:00
ubuntucve
ubuntucve
CVE-2024-0914
2024-01-31 00:00:00
prion
prion
Design/Logic Flaw
2024-01-31 05:15:00
debiancve
debiancve
CVE-2024-0914
2024-01-31 05:15:08
rocky
rocky
opencryptoki security update
2024-04-05 14:55:53
redhat
redhat
(RHSA-2024:1239) Moderate: opencryptoki security update
2024-03-07 20:29:07
(RHSA-2024:1856) Moderate: opencryptoki security update
2024-04-16 15:08:41
(RHSA-2024:1411) Moderate: opencryptoki security update
2024-03-19 16:35:22
osv
osv
Moderate: opencryptoki security update
2024-03-07 00:00:00
Moderate: opencryptoki security update
2024-04-05 14:55:53
openCryptoki-3.23.0-4.1 on GA media
2024-07-15 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2298-1)
2024-07-05 00:00:00
Mageia: Security Advisory (MGASA-2024-0152)
2024-04-29 00:00:00
openSUSE: Security Advisory for openCryptoki (SUSE-SU-2024:1447-1)
2024-05-07 00:00:00
redhatcve
redhatcve
CVE-2024-0914
2024-01-25 22:49:32
vulnrichment
vulnrichment
ibm
ibm
oraclelinux
oraclelinux
opencryptoki security update
2024-04-03 00:00:00
opencryptoki security update
2024-03-08 00:00:00
aix
aix
nvd
nvd
CVE-2024-0914
2024-01-31 05:15:08
almalinux
almalinux
Moderate: opencryptoki security update
2024-03-07 00:00:00
Moderate: opencryptoki security update
2024-04-02 00:00:00
mageia
mageia
Updated opencryptoki packages fix security vulnerability
2024-04-27 09:26:16
cvelist
cvelist
cve
cve
CVE-2024-0914
2024-01-31 05:15:08
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.1
Confidence
Low
EPSS
0.001
Percentile
40.6%
Related for ROS-20240410-23