CVE Vulnerability

CWE-327

CVE-2021-45487

by

In NetBSD through 9.2, the IPv4 ID generation algorithm does not use appropriate cryptographic measures.

CVE-2021-45488

by

In NetBSD through 9.2, there is an information leak in the TCP ISN (ISS) generation algorithm.

CVE-2021-45450

by

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

CVE-2021-45451

by

In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

CVE-2021-45485

by

In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn’t properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses.

CVE-2021-45081

by

An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS.