Lucene search
MitreCVELIST:CVE-2016-1000236HistoryNov 19, 2019 - 5:01 p.m.
CVE-2016-1000236
2019-11-1917:01:15
mitre
www.cve.org
2
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=838618
bugzilla.redhat.com/show_bug.cgi?id=1371409
bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000236
security-tracker.debian.org/tracker/CVE-2016-1000236
travis-ci.com/nodejs/security-wg/builds/76423102
www.mail-archive.com/secure-testing-team%40lists.alioth.debian.org/msg06583.html
Related
prion
prion
Type confusion
2019-11-19 17:15:00
ubuntucve
ubuntucve
CVE-2016-1000236
2019-11-19 00:00:00
nvd
nvd
CVE-2016-1000236
2019-11-19 17:15:11
osv
osv
cookie-signature Timing Attack
2020-01-06 18:44:10
cve
cve
CVE-2016-1000236
2019-11-19 17:15:11
debiancve
debiancve
CVE-2016-1000236
2019-11-19 17:15:11
nodejs
nodejs
Timing Attack
2016-07-27 00:24:38
github
github
cookie-signature Timing Attack
2020-01-06 18:44:10
4.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
62.1%
Related for CVELIST:CVE-2016-1000236