Skip to content
OpenAdvisories

Product · NERDVANA

Crypt::SecretBuffer

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5

    Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks

    Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks. For example, if Crypt::SecretBuffer was used to store and compare plaintext passwords, then discrepencies in timing could be used to guess the secret password.