CVE-2017-20240

The Crypt::PBKDF2 Perl module (versions before 0.261630 ) is vulnerable to timing attacks because it utilizes Perl's built-in eq comparison. An attacker could exploit timing discrepancies to guess the underlying derived-key . This issue affects distributions including Amazon Linux 2023 , Fedora 4...