CVE-2022-48566

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-48566

CGA ID

CGA-qp4h-wqjq-983c

Severity

Unknown

Description

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.

References

https://images.chainguard.dev/security/CGA-qp4h-wqjq-983c
https://github.com/advisories/GHSA-cgfh-jp5w-8cmx
https://bugs.python.org/issue40791
https://security.netapp.com/advisory/ntap-20231006-0013/
https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00017.html
https://security-tracker.debian.org/tracker/CVE-2022-48566

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™

Media Kit Contact Us

Private Policy

CVE-2022-48566

Severity

Description

References

Affected packages

Products

Why Chainguard

Customers

Company

Resources