USN-8769-1: phpseclib vulnerability
Ubuntu patches phpseclib non-constant-time padding validation enabling remote padding oracle timing attacks against AES-CBC.
Stories per day · 30 days
2 RSS
2 stories, newest first · one card per story
Stories tagged #padding-oracle
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
TantoSec published a working exploit chaining a Telerik UI padding oracle to unauthenticated RCE; Progress patched the flaws in July.