6 matches found
Important: perl-CryptX
Issue Overview: CryptX versions before 0.088001 for Perl compare AEAD authentication tags in non-constant time in the streaming decryptdone path. The decryptdone$tag form compares it against the computed tag with memNE memcmp != 0, which short-circuits on the first differing byte, so its run time...
7.5CVSS6.3AI score0.00802EPSS
SaveExploits0
20