Поиск уязвимостей
Количество 52
Количество 52
CVE-2017-17805
The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.
CVE-2017-17805
The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 doe ...
SUSE-SU-2018:0011-1
Security update for the Linux Kernel
SUSE-SU-2018:0986-1
Security update for the Linux Kernel
SUSE-SU-2018:0213-1
Security update for the Linux Kernel
ELSA-2019-4316
ELSA-2019-4316: Unbreakable Enterprise kernel security update (IMPORTANT)
SUSE-SU-2018:0180-1
Security update for the Linux Kernel
GHSA-7cfh-r37c-4mqr
The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization.
GHSA-h6gr-h9qh-f94v
The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable.
SUSE-SU-2018:0040-1
Security update for the Linux Kernel
ELSA-2019-2473
ELSA-2019-2473: kernel security and bug fix update (IMPORTANT)
ELSA-2018-3083
ELSA-2018-3083: kernel security, bug fix, and enhancement update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-17805 The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable. | CVSS3: 7.8 | 0% Низкий | почти 9 лет назад |
| CVE-2017-17805 The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 doe ... | CVSS3: 7.8 | 0% Низкий | почти 9 лет назад |
 | SUSE-SU-2018:0011-1 Security update for the Linux Kernel | почти 9 лет назад | ||
| SUSE-SU-2018:0986-1 Security update for the Linux Kernel | больше 8 лет назад | ||
| SUSE-SU-2018:0213-1 Security update for the Linux Kernel | почти 9 лет назад | ||
| ELSA-2019-4316 ELSA-2019-4316: Unbreakable Enterprise kernel security update (IMPORTANT) | почти 8 лет назад | ||
| SUSE-SU-2018:0180-1 Security update for the Linux Kernel | почти 9 лет назад | ||
| GHSA-7cfh-r37c-4mqr The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHA3) to cause a kernel stack buffer overflow by executing a crafted sequence of system calls that encounter a missing SHA-3 initialization. | CVSS3: 7.8 | 1% Низкий | больше 4 лет назад |
| GHSA-h6gr-h9qh-f94v The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or have unspecified other impact by executing a crafted sequence of system calls that use the blkcipher_walk API. Both the generic implementation (crypto/salsa20_generic.c) and x86 implementation (arch/x86/crypto/salsa20_glue.c) of Salsa20 were vulnerable. | CVSS3: 7.8 | 0% Низкий | больше 4 лет назад |
| SUSE-SU-2018:0040-1 Security update for the Linux Kernel | почти 9 лет назад | ||
| ELSA-2019-2473 ELSA-2019-2473: kernel security and bug fix update (IMPORTANT) | около 7 лет назад | ||
| ELSA-2018-3083 ELSA-2018-3083: kernel security, bug fix, and enhancement update (IMPORTANT) | около 8 лет назад |
Уязвимостей на страницу