https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:11:30 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-06185 bdu:2025-06185 https://cve.radiocsirt.org/vuln/bdu:2025-06185 https://cve.radiocsirt.org/vuln/bit-vault-2023-25000 <p><strong>Affected:</strong> Bitnami: vault</p> <p>HashiCorp Vault&#39;s implementation of Shamir&#39;s secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.</p> <p><strong>Affected:</strong> Bitnami: vault</p> <p>HashiCorp Vault&#39;s implementation of Shamir&#39;s secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.</p> https://cve.radiocsirt.org/vuln/bit-vault-2023-25000 https://cve.radiocsirt.org/vuln/euvd-2026-216319 EUVD-2026-216319 https://cve.radiocsirt.org/vuln/euvd-2026-216319 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25000 <p>HashiCorp Vault&#39;s implementation of Shamir&#39;s secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.</p> <p>HashiCorp Vault&#39;s implementation of Shamir&#39;s secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25000 https://cve.radiocsirt.org/vuln/ghsa-vq4h-9ghm-qmrr <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>HashiCorp Vault&#39;s implementation of Shamir&#39;s secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.</p> <p><strong>Affected:</strong> Go: github.com/hashicorp/vault</p> <p>HashiCorp Vault&#39;s implementation of Shamir&#39;s secret sharing used precomputed table lookups, and was vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares. Fixed in Vault 1.13.1, 1.12.5, and 1.11.9.</p> https://cve.radiocsirt.org/vuln/ghsa-vq4h-9ghm-qmrr https://cve.radiocsirt.org/vuln/gsd-2023-25000 gsd-2023-25000 https://cve.radiocsirt.org/vuln/gsd-2023-25000 https://cve.radiocsirt.org/vuln/rhsa-2023:1326 <p>go-yaml: Denial of Service in go-yaml goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be mongo-go-driver: specific cstrings input may not be properly validated golang: out-of-bounds read in golang.org/x/text/language leads to DoS prometheus/client_golang: Denial of service using InstrumentHandlerCounter helm: Denial of service through through repository index file helm: Denial of service through schema file golang: crash in a golang.org/x/crypto/ssh server vault: insufficient certificate revocation list checking golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests x/net/http2/h2c: request smuggling golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang: crypto/tls: large handshake records may cause panics golang: net/http, mime/multipart: denial of service from excessive resource consumption exporter-toolkit: authentication bypass via cache poisoning vault: Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File hashicorp/vault: Vault’s PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata hashicorp/vault: Cache-Timing Attacks During Seal and Unseal Operations helm: getHostByName Function Information Disclosure containerd: Supplementary groups are not set up properly runc: Rootless runc makes `/sys/fs/cgroup` writable runc: volume mount race condition (regression of CVE-2019-19921) runc: AppArmor can be bypassed when `/pro…</p> <p>go-yaml: Denial of Service in go-yaml goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be mongo-go-driver: specific cstrings input may not be properly validated golang: out-of-bounds read in golang.org/x/text/language leads to DoS prometheus/client_golang: Denial of service using InstrumentHandlerCounter helm: Denial of service through through repository index file helm: Denial of service through schema file golang: crash in a golang.org/x/crypto/ssh server vault: insufficient certificate revocation list checking golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests x/net/http2/h2c: request smuggling golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding golang: crypto/tls: large handshake records may cause panics golang: net/http, mime/multipart: denial of service from excessive resource consumption exporter-toolkit: authentication bypass via cache poisoning vault: Vault’s Microsoft SQL Database Storage Backend Vulnerable to SQL Injection Via Configuration File hashicorp/vault: Vault’s PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata hashicorp/vault: Cache-Timing Attacks During Seal and Unseal Operations helm: getHostByName Function Information Disclosure containerd: Supplementary groups are not set up properly runc: Rootless runc makes `/sys/fs/cgroup` writable runc: volume mount race condition (regression of CVE-2019-19921) runc: AppArmor can be bypassed when `/pro…</p> https://cve.radiocsirt.org/vuln/rhsa-2023:1326 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0795 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder die Kryptographie zu umgehen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Hashicorp Vault ausnutzen, um Dateien zu manipulieren, einen Denial of Service Zustand herbeizuführen oder die Kryptographie zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0795