| Package | Affected versions | Patched versions |
|---|---|---|
| barebox | ≤ 2021.07.0 |
common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash comparison.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free