| Package | Affected versions | Patched versions |
|---|---|---|
| crypto++ | ≤ 5.6.3 |
The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Crypto++ (aka cryptopp) before 5.6.4 may be optimized out by the compiler, which allows attackers to conduct timing attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free