CVE-2022-48566

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-48566

Severity

5.9

Medium

CVSS CVSS_V3

Description

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.

References

https://images.chainguard.dev/security/CGA-qp4h-wqjq-983c
https://github.com/advisories/GHSA-cgfh-jp5w-8cmx
https://images.chainguard.dev/security/CGA-w5m5-gm6w-h3j8
https://bugs.python.org/issue40791
https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
https://security.netapp.com/advisory/ntap-20231006-0013/
https://security-tracker.debian.org/tracker/CVE-2022-48566

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Private Policy

Product

Chainguard Containers Chainguard Libraries Chainguard VMs Integrations Pricing

Solutions

FedRAMP PCI DSS Golden Images CVE Remediation Public Sector

Customers

Customer Stories Chainguard Reviews

Resources

Events & Webinars Chainguard Courses Documentation Trust Center

Company

About Us Blog Partners Newsroom Careers Legal