Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Daiki Ueno

#23459of 60,403
12.7Total CVSS
Vulnerabilities · 2
Medium
2
PT-2023-8678
2023-10-23
5.9
CVE-2023-5981
Gnutls
Gnutls
A vulnerability was found related to the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange, which differ from response times of ciphertexts with correct PKCS#1 v1.5 padding. This issue is associated with information disclosure through inconsistency. Exploitation of the vulnerability may allow a remote attacker to access confidential data.
PT-2021-6619
2021-12-22
6.8
CVE-2021-4209
Gnutls
Gnutls
A NULL pointer dereference flaw was found in GnuTLS, related to the implementation of the `wrap nettle hash fast()` function in the cryptographic library. This flaw can cause undefined behavior when providing zero-length input to Nettle's hash update functions, which internally call `memcpy()`. The issue can lead to a denial of service after authentication in rare circumstances.