CVE-2024-23771

9.8CRITICAL

darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.

게시됨: 1/22/2024업데이트됨: 5/30/2025
NVD에서 보기MITRE에서 보기

설명

darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.

AI 분석AI 기반

영향받는 제품

unix4lyfedarkhttpd

참조