SUSE CVE-2012-2122

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when running in certain environments with certain implementations of the memcmp function, allows remo...

ALPINE-CVE-2023-0286

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...

MGASA-2021-0582 Updated ldns packages fix security vulnerability

Heap out-of-bound read vulnerability in rrfrmstrinternal function Heap out-of-bound read vulnerability in ldnsnsec3saltdata function Fixed time memory compare for Openssl 0.9.8...

In the GNU C Library (aka glibc or libc6) through 2.29 the memcmp function for the x32 architecture can incorrectly return zero (indicating that the inputs are equal) because the RDX most significant bit is mishandled.

...

The vulnerability of the PA-RISC CRYPTO_memcmp function in the OpenSSL library, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of the PA-RISC CRYPTOmemcmp function in the OpenSSL library is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

DEBIAN-CVE-2019-7309

In the GNU C Library aka glibc or libc6 through 2.29, the memcmp function for the x32 architecture can incorrectly return zero indicating that the inputs are equal because the RDX most significant bit is mishandled...

GNU C Library Local Denial of Service Vulnerability

The GNU C Library glibc is an open-source, free, easy-to-download C compiler released under the LGPL license. A local denial of service vulnerability exists in the memcmp function for the x32 architecture in GNU C Library 2.29 and earlier versions, which can be exploited by an attacker to cause a...

OpenSSL Security Restriction Bypass Vulnerability (CNVD-2018-06538)

OpenSSL is an open source implementation of SSL used to implement strong encryption for network communications. A security vulnerability exists in the OpenSSL version 1.1.0-1.1.0g PA-RISC CRYPTOmemcmp function implementation, which can be exploited by an attacker via a constructed message to bypa...

DEBIAN-CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...