Lucene search
+L

1 matches found

OSV
OSV
added 2023/03/06 11:15 p.m.14 views

AZL-34797 CVE-2022-45142 affecting package heimdal for versions less than 7.8.0-3

The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0 branches and possibly other branches a logic inversion sneaked...

7.5CVSS6.8AI score0.00491EPSS
SaveExploits0References1
Rows per page
Query Builder