Security Advisory

CVE-2024-25714

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-02-11 00:00:00

Last updated 2024-08-01 23:52:06

Assigner mitre

State PUBLISHED

Description

In Rhonabwy through 1.1.13, HMAC signature verification uses a strcmp function that is vulnerable to side-channel attacks, because it stops the comparison when the first difference is spotted in the two signatures. (The fix uses gnutls_memcmp, which has constant-time execution.)

← Browse all CVEs View on cve.org ↗