Security Advisory

CVE-2021-37848

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-02 19:46:02
Last updated 2024-08-04 01:30:09
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash comparison.