Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.
Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.
Issue summary: QUIC process may keep memory for QUIC packet
buffer for much longer period than necessary.
Impact summary: Remote peer can exploit this vulnerability
by sending maliciously crafted pac
High(7.5)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: The QUIC stream reassembly algorithm performance deteriorates
progressively as packets are arriving out of order. The worst case has
a quadratic complexity proportional to the number of
Medium(5.3)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: The OpenSSL QUIC server, when configured to not preform address
validation, can be forced to count incoming packets multiple times in its
unvalidated credit computation, leading to a vi
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: A non-constant-time optimized implementation of scalar
point multiplication is used for SM2 private key operations on ARM64 and
RISC-V platforms.
Impact summary: An attacker able to me
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: A TLS server that calls SSL_set_SSL_CTX() to switch a
connection to a different SSL_CTX part way through a handshake may access
memory beyond the end of an internal array if the replace
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: OpenSSL QUIC stack does not enforce connection
level flow control for streams. Remote peers may send more bytes
as long as they fit within the stream flow control limits.
Impact summar
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: A malicious remote peer may flood the local QUIC
stack with NEW_CONNECTION_ID frames by avoiding a limit check on
how many connection IDs the remote QUIC stack can use.
Impact summary:
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: A certificate with many nameRelativeToCRLIssuer CRL
distribution points causes disproportionate heap growth when OpenSSL caches
X.509 extensions.
Impact summary: Receiving a crafted ce
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: The generic elliptic-curve scalar multiplication used for
ECDSA and SM2 signature operations with curves that do not have a dedicated
implementation leaks information about the secret n
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: A CMP client that requests certificate revocation on the basis
of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when
processing a crafted revocation response.
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: An established DTLS 1.2 association using an AEAD cipher suite
can be terminated by a single unauthenticated datagram whose encrypted
fragment is shorter than the mandatory explicit IV
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: SM2 signature generation uses non-constant-time arithmetic
on secret values, forming a timing side-channel.
Impact summary: An attacker able to measure SM2 signing times may learn
info
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: The DTLS retransmission logic does not correctly handle
a handshake message write that is suspended part-way through.
The retransmitted message can be read past the message buffer and
t
High(8.2)
InteressataDettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Interessata · Corretta: 3.5.7-1~deb13u3
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: Converting an excessively large OCTET STRING value to
a hexadecimal string leads to a heap buffer overflow on 32 bit platforms.
Impact summary: A heap buffer overflow may lead to a cra
Critical(9.8)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
Dettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Corretta · Corretta: 3.5.5-1~deb13u2
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
Issue summary: Applications using RSASVE key encapsulation to establish
a secret encryption key can send contents of an uninitialized memory buffer to
a malicious peer.
Impact summary: The uninitiali
High(7.5)
Sconosciuto
L’associazione dei pacchetti è in corso. Osservato:
Dettagli (4)
3.5.6-1~deb13u2 · amd64 · trixie-security · Historical version
Corretta · Corretta: 3.5.5-1~deb13u2
nvd · openssl · debian · 13
3.5.7-1~deb13u2 · amd64 · trixie-security · Historical version
