Approved changes feed: RSS · Atom
cpe:2.3:a:axtls_project:axtls:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Axtls Project (eaafa916-ce8f-51da-9983-b9dff5c2d2f4) |
|---|---|
| Product | Axtls (db9ccfbb-8f4d-5263-8e99-e5bae43fc55d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/axtls |
purl2cpe | 2026-06-01 10:14:47.052835 |
pkg:deb/ubuntu/axtls |
purl2cpe | 2026-06-01 10:14:47.052838 |
pkg:github/jackiexie168/axtls |
purl2cpe | 2026-06-01 10:14:47.052841 |
pkg:sourceforge/axtls |
purl2cpe | 2026-06-01 10:14:47.052844 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-9689 |
vulnerable | 2026-06-08 05:14:26.035731 |
Details available
process_certificate in tls1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow via a crafted TLS certificate handshake message with zero certificates.
Published: 2019-12-03T19:59:21.000Z
Updated: 2024-08-04T21:54:45.285Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8981 |
vulnerable | 2026-06-08 05:14:24.782962 |
Details available
tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged.
Published: 2019-03-26T01:21:21.000Z
Updated: 2024-08-04T21:31:37.713Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10013 |
vulnerable | 2026-06-08 05:12:21.914928 |
Details available
The asn1_signature function in asn1.c in Cameron Hamilton-Rich axTLS through 2.1.5 has a Buffer Overflow that allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted certificate in the TLS certificate handshake message, because the result of get_asn1_length() is not checked for a minimum or maximum size.
Published: 2019-12-03T20:00:43.000Z
Updated: 2024-08-04T22:10:08.438Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16253 |
vulnerable | 2026-06-08 05:11:04.578055 |
Details available
In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not properly verify the ASN.1 metadata. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation through fake X.509 certificates. This is an even more permissive variant of CVE-2006-4790 and CVE-2014-1568.
Published: 2018-11-07T20:00:00.000Z
Updated: 2024-08-05T10:17:38.364Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16150 |
vulnerable | 2026-06-08 05:11:04.287747 |
Details available
In sig_verify() in x509.c in axTLS version 2.1.3 and before, the PKCS#1 v1.5 signature verification does not reject excess data after the hash value. Consequently, a remote attacker can forge signatures when small public exponents are being used, which could lead to impersonation through fake X.509 certificates. This is a variant of CVE-2006-4340.
Published: 2018-11-07T20:00:00.000Z
Updated: 2024-08-05T10:17:38.284Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16149 |
vulnerable | 2026-06-08 05:11:04.287215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.