Skip to content
OpenAdvisories

Package · Debian

libcryptx-perl

6 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path

    CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path. The decrypt_done($tag) form compares it against the computed tag with memNE (memcmp() != 0), which short-circuits on the first …