Description
crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest verification.
Unscored
CVE-2021-37847
EUVD-2021-24326GHSA-4xwg-632r-5463
crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest verification.
Published Aug 2, 2021 · Updated Aug 4, 2024 · Assigned by mitre