Vulnerabilidades de amazon aws libcrypto (CVE)

Registros CVE publicados para amazon aws libcrypto, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
7.5Alta
CVE-2026-3338

PKCS7_verify Signature Validation Bypass in AWS-LC

AWS AWS-LC; Red Hat Red Hat Trusted Artifact Signer 1.3; Red Hat Confidential Compute Attestation; Red Hat Red Hat Enterprise Linux 10

Improper signature validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass signature verification when processing PKCS7 objects with Authenticated Attributes. Customers of AWS services do not need to take action. Applications using …

5.9Media
CVE-2026-3337

Timing Side-Channel in AES-CCM Tag Verification in AWS-LC

AWS AWS-LC; AWS AWS-LC-FIPS

Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVP_aes_128_ccm, EVP_aes_19…

1.1%EPSS
7.5Alta
CVE-2026-3336

PKCS7_verify Certificate Chain Validation Bypass in AWS-LC

AWS AWS-LC; Red Hat Red Hat Trusted Artifact Signer 1.3; Red Hat Confidential Compute Attestation; Red Hat Red Hat Enterprise Linux 10

Improper certificate validation in PKCS7_verify() in AWS-LC allows an unauthenticated user to bypass certificate chain verification when processing PKCS7 objects with multiple signers, except the final signer. Customers of AWS services do not need to take ac…