Lucene search
PRIOn knowledge basePRION:CVE-2016-1000236HistoryNov 19, 2019 - 5:15 p.m.
Type confusion
2019-11-1917:15:00
PRIOn knowledge base
www.prio-n.com
3
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cookie-signature | lt | 1.0.6 | |
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 9.0 |
References
bugs.debian.org/cgi-bin/bugreport.cgi?bug=838618
bugzilla.redhat.com/show_bug.cgi?id=1371409
bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000236
security-tracker.debian.org/tracker/CVE-2016-1000236
travis-ci.com/nodejs/security-wg/builds/76423102
www.mail-archive.com/secure-testing-team%40lists.alioth.debian.org/msg06583.html
Related
osv
osv
cookie-signature Timing Attack
2020-01-06 18:44:10
cve
cve
CVE-2016-1000236
2019-11-19 17:15:11
debiancve
debiancve
CVE-2016-1000236
2019-11-19 17:15:11
ubuntucve
ubuntucve
CVE-2016-1000236
2019-11-19 00:00:00
cvelist
cvelist
CVE-2016-1000236
2019-11-19 17:01:15
nvd
nvd
CVE-2016-1000236
2019-11-19 17:15:11
nodejs
nodejs
Timing Attack
2016-07-27 00:24:38
github
github
cookie-signature Timing Attack
2020-01-06 18:44:10