Summary
Successful exploitation of these vulnerabilities could cause the affected modules in the product to stop working.
Vulnerabilities 2
-
High 7.5
Infinite loop in BN_mod_sqrt() reachable when parsing certificates
The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or e…
-
Unscored —
A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming…
Revision history
-
#1
Publication Date
References
-
ICS Advisory ICSA-22-272-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-272-02
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-272-02
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf