himmelblau vulnerabilities (SUSE)
19 vulnerabilities.
himmelblauSUSEHimmelblau: Authentication Bypass via Cross-User Local Session Impersonation in Device Authorization Grant (DAG) Flow8.4 HighhimmelblauSUSErust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers5.1 MediumhimmelblauSUSErust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding5.1 MediumhimmelblauSUSErust-openssl: undefined behavior in X509Ref::ocsp_responders for certificates with non-UTF-8 OCSP URLs8.7 HighhimmelblauSUSErust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer8.3 HighhimmelblauSUSErust-openssl: MdCtxRef::digest_final() writes past caller buffer with no length check8.1 HighhimmelblauSUSErust-openssl: Incorrect bounds assertion in aes key wrap7.2 HighhimmelblauSUSErust-openssl: Out-of-bounds read in PEM password callback when user callback returns an oversized length1.7 LowhimmelblauSUSErust-openssl: Deriver::derive and PkeyCtxRef::derive can overflow short buffers on OpenSSL 1.1.17.2 HighhimmelblauSUSEhimmelblau: NSS fake-primary group lookup reintroduces name collision risk6.3 MediumhimmelblauSUSEhimmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache8.8 HighhimmelblauSUSEtime affected by a stack exhaustion denial of service attack6.8 MediumhimmelblauSUSEHimmelblau vulnerable to GID collision via group name-derived mapping (privilege escalation)4.4 MediumhimmelblauSUSETracing logging user input may result in poisoning logs with ANSI escape sequences2.3 LowhimmelblauSUSEHimmelblau's Kerberos credential cache collection is world readable7.1 HighhimmelblauSUSEHimmelblau offline auth permits authentication with invalid Hello PIN5.2 MediumhimmelblauSUSERust-openssl: rust-openssl use-after-free in `md::fetch` and `cipher::fetch`3.7 LowhimmelblauSUSEUsers: `root` appended to group listings7.1 HighhimmelblauSUSERustls: rustls network-reachable panic in `acceptor::accept`5.3 Medium