Описание
auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| dhcpcd5 | fixed | 7.1.0-2 | package | |
| dhcpcd5 | no-dsa | stretch | package | |
| dhcpcd5 | not-affected | jessie | package |
Примечания
https://roy.marples.name/git/dhcpcd.git/commit/?id=7121040790b611ca3fbc400a1bbcd4364ef57233
https://roy.marples.name/git/dhcpcd.git/commit/?id=cfde89ab66cb4e5957b1c4b68ad6a9449e2784da
https://roy.marples.name/git/dhcpcd.git/commit/?id=aee631aadeef4283c8a749c1caf77823304acf5e
EPSS
Процентиль: 81%
0.02045
Низкий
Связанные уязвимости
CVSS3: 5.9
ubuntu
больше 7 лет назад
auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
CVSS3: 5.9
nvd
больше 7 лет назад
auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
github
больше 4 лет назад
auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
CVSS3: 9.8
altlinux
больше 7 лет назад
ALT-PU-2019-1748: package `dhcpcd` update to version 7.2.1-alt1
EPSS
Процентиль: 81%
0.02045
Низкий