CVE search · CVE-2022-48566
CVE-2022-48566
medium 5.9
An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-362
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 5.9 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- python · python
- debian · debian_linux
- netapp · active_iq_unified_manager
- netapp · converged_systems_advisor_agent
References
- https://bugs.python.org/issue40791ExploitIssue TrackingPatchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.htmlMailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20231006-0013/Third Party Advisory
- https://bugs.python.org/issue40791ExploitIssue TrackingPatchVendor Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00022.htmlMailing ListThird Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/10/msg00017.htmlMailing ListThird Party Advisory
- https://security.netapp.com/advisory/ntap-20231006-0013/Third Party Advisory