2021-08-02 19:46:02
mitre
PUBLISHED
common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash comparison.