Entrouvert

Lasso

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-28091

  • EPSS 0.51%
  • Published 04.06.2021 15:15:07
  • Last modified 21.11.2024 05:59:04

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.

7.5

CVE-2015-1783

  • EPSS 1.06%
  • Published 11.08.2017 21:29:00
  • Last modified 20.04.2025 01:37:25

The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service (uninitialized memory access and application crash) via unspecified vectors.

4.3

CVE-2009-0050

  • EPSS 0.15%
  • Published 07.01.2009 18:30:15
  • Last modified 09.04.2025 00:30:58

Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-...