CVE-2024-23771

9.8CRITICAL

darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.

发布于: 1/22/2024更新于: 5/30/2025
在NVD查看在MITRE查看

描述

darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.

AI分析AI驱动

受影响产品

unix4lyfedarkhttpd

参考资料