medium5.9
CVE-2019-11578
auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
Impact
auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dhcpcd Project | Dhcpcd | before 7.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/108090
- https://roy.marples.name/archives/dhcpcd-discuss/0002415.html
- https://roy.marples.name/git/dhcpcd.git/commit/?id=7121040790b611ca3fbc400a1bbcd4364ef57233
- https://roy.marples.name/git/dhcpcd.git/commit/?id=aee631aadeef4283c8a749c1caf77823304acf5e
- https://roy.marples.name/git/dhcpcd.git/commit/?id=cfde89ab66cb4e5957b1c4b68ad6a9449e2784da
- http://www.securityfocus.com/bid/108090
- https://roy.marples.name/archives/dhcpcd-discuss/0002415.html
- https://roy.marples.name/git/dhcpcd.git/commit/?id=7121040790b611ca3fbc400a1bbcd4364ef57233
- https://roy.marples.name/git/dhcpcd.git/commit/?id=aee631aadeef4283c8a749c1caf77823304acf5e
- https://roy.marples.name/git/dhcpcd.git/commit/?id=cfde89ab66cb4e5957b1c4b68ad6a9449e2784da