Skip to content
OpenAdvisories

Package · Ubuntu

scram

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.6

    Timing Attack Vulnerability in SCRAM Authentication

    SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementatio…