Lucene search

GoogleOSV:CVE-2019-11578

HistoryApr 28, 2019 - 4:29 p.m.

CVE-2019-11578

2019-04-2816:29:00

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.8%

JSON

auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.

CPENameOperatorVersion
dhcpcdeq6.4.4
dhcpcdeq5.0.2
dhcpcdeq6.4.2
dhcpcdeq5.99.7
dhcpcdeq6.7.0
dhcpcdeq6.9.4
dhcpcdeq6.3.1
dhcpcdeq6.7.1
dhcpcdeq7.0.5
dhcpcdeq7.0.0-beta3

Name	Operator	Version
dhcpcd	eq	6.4.4
dhcpcd	eq	5.0.2
dhcpcd	eq	6.4.2
dhcpcd	eq	5.99.7
dhcpcd	eq	6.7.0
dhcpcd	eq	6.9.4
dhcpcd	eq	6.3.1
dhcpcd	eq	6.7.1
dhcpcd	eq	7.0.5
dhcpcd	eq	7.0.0-beta3

Rows per page:

1-10 of 1081

References

www.securityfocus.com/bid/108090

roy.marples.name/archives/dhcpcd-discuss/0002415.html

roy.marples.name/git/dhcpcd.git/commit/?id=7121040790b611ca3fbc400a1bbcd4364ef57233

roy.marples.name/git/dhcpcd.git/commit/?id=aee631aadeef4283c8a749c1caf77823304acf5e

roy.marples.name/git/dhcpcd.git/commit/?id=cfde89ab66cb4e5957b1c4b68ad6a9449e2784da