Lucene search
+L

1 matches found

OSV
OSV
added 2023/03/18 10:16 p.m.9 views

MGASA-2023-0098 Updated heimdal packages fix security vulnerability

The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp. When these patches were backported a logic inversion sneaked in causing the validation of message integrity codes in gssapi/arcfour to b...

7.5CVSS7AI score0.00491EPSS
SaveExploits0References5
Rows per page
Query Builder