entrouvert Lasso 0.4.1

CPE Details

entrouvert Lasso 0.4.1
entrouvert
lasso
0.4.1
2020-07-30
09h53 +00:00
2020-07-30
09h53 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:entrouvert:lasso:0.4.1:*:*:*:*:*:*:*

Informations

Vendor

entrouvert

Product

lasso

Version

0.4.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-28091 2021-06-04 12h39 +00:00 Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.
7.5
High
CVE-2015-1783 2017-08-11 19h00 +00:00 The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service (uninitialized memory access and application crash) via unspecified vectors.
7.5
High
CVE-2009-0050 2009-01-07 17h00 +00:00 Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
4.3