NASA CryptoLib.

NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

• NASA CryptoLib
• Authentication bypass

CryptoLib Has Heap Buffer Overflow Vulnerability in KMC Base64 Decode Handling (KMC JSON base64ciphertext/base64cleartext)

• nasa CryptoLib
• Memory corruption

CryptoLib Vulnerable to Heap Buffer Overflow in MariaDB SA Hexstring Conversion

• nasa CryptoLib
• Memory corruption

CryptoLib Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion

• nasa CryptoLib
• Denial of service

CryptoLib Memory Leak on HTTP Error Response in KMC Client

• nasa CryptoLib
• Denial of service

CryptoLib Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion

• nasa CryptoLib
• Denial of service

CryptoLib Has Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern

• nasa CryptoLib
• Memory corruption

CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern

• nasa CryptoLib
• Memory corruption

CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string

• nasa CryptoLib
• Memory corruption

CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity

• nasa CryptoLib
• Memory corruption

CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters

• nasa CryptoLib
• Memory corruption

CryptoLib vulnerable to Stack Buffer Overflow in Crypto_Key_Update due to missing TLV length check

• nasa CryptoLib
• Memory corruption

CryptoLib command Injection vulnerability in initialize_kerberos_keytab_file_login()

• nasa CryptoLib
• Command injection

Heap Buffer Overflow in NASA CryptoLib 1.4.0 `Crypto_TC_Check_IV_Setup`

• nasa CryptoLib
• Memory corruption

NASA CryptoLib: In NASA CryptoLib before 1.3.2, the key state is not checked before use…

• NASA CryptoLib
• CWE-913

Active debug code in NASA CryptoLib

• NASA CryptoLib
• CWE-489

NASA CryptoLib: NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state…

• NASA CryptoLib
• CWE-913

Unchecked return value in NASA CryptoLib

• NASA CryptoLib
• CWE-252

Heap Buffer Overflow via Incomplete Length Check in `Crypto_TC_ApplySecurity`

• nasa CryptoLib
• Memory corruption

CryptoLib Has Heap Overflow in Crypto_TM_ProcessSecurity due to Unchecked Secondary Header Length

• nasa CryptoLib
• Memory corruption

CryptoLib's Crypto_TC_Prep_AAD Has Buffer Overflow Due to Integer Underflow

• nasa CryptoLib
• Memory corruption

CryptoLib Has Heap Buffer Overflow Due to Unsigned Integer Underflow in Crypto_TC_ProcessSecurity

• nasa CryptoLib
• Memory corruption

CryptoLib Has Heap Buffer Overflow in Crypto_AOS_ProcessSecurity Function

• nasa CryptoLib
• Memory corruption

CryptoLib's crypto_handle_incrementing_nontransmitted_counter Function has Memory Leak

• nasa CryptoLib
• Denial of service

CryptoLib's Crypto_TC_ApplySecurity() Has a Heap Buffer Overflow Vulnerability

• nasa CryptoLib
• Memory corruption