Vulnerabilities (CVE)

Filtered by vendor Entrouvert Subscribe
Filtered by product Lasso
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-28091 3 Debian, Entrouvert, Fedoraproject 3 Debian Linux, Lasso, Fedora 2021-12-02 5.0 MEDIUM 7.5 HIGH
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.
CVE-2015-1783 2 Entrouvert, Fedoraproject 2 Lasso, Fedora 2017-08-24 5.0 MEDIUM 7.5 HIGH
The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers to cause a denial of service (uninitialized memory access and application crash) via unspecified vectors.