Advisories · Technology
Stephan Muelle libkcapi.
Every CVE that names Stephan Muelle libkcapi among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return
- Stephan Muelle libkcapi
- Red Hat Enterprise Linux 10
- Denial of service
- CVSS 7.3 High
Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path
- Stephan Muelle libkcapi
- Red Hat Enterprise Linux 10
- Memory corruption
- CVSS 6.5 Medium
Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries
- Stephan Muelle libkcapi
- Red Hat Enterprise Linux 10
- Weak cryptography or TLS