Improper Access Control

openssl is vulnerable to improper access control. The vulnerability exists in evpmdinitinternal and evpcipherinitinternal functions of digest.c and evpenc.c respectively which allows an attacker to incorrectly pass NIDundef as this value in the call to EVPCIPHERmethnew...

CVE-2021-37847

crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest verification...

Design/Logic Flaw

crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest verification...