Fallos del tipo CWE-208

192 resultados

Discrepância de Tempo Observável

A fraqueza ocorre quando o tempo de execução de uma operação sensível (como validação de senha, verificação de token ou decisão criptográfica) varia dependendo do resultado, permitindo um atacante inferir informações pela duração da resposta. Diferenças de milissegundos podem revelar se um palpite estava correto.

Ejemplo

Um sistema valida senha comparando string por string: se o primeiro caractere estiver errado, retorna erro imediatamente; se estiver certo, continua comparando o segundo. Um atacante mede o tempo de resposta e deduz o padrão correto caractere por caractere, sem precisar da senha correta.

Cómo mitigar

Use funções de comparação constante (ex: `crypto.timingSafeEqual()` em Node.js ou `hmac_equals()` em PHP) que levam o mesmo tempo independente do ponto de falha. Para operações complexas, adicione delays aleatórios ou processe sempre a operação completa antes de retornar resultado.

CVE-2024-45052MEDIUMFides Webserver Authentication Timing-Based Username Enumeration VulnerabilityEPSS 0.6%CVE-2024-52307MEDIUMauthentik allows a timing attack due to missing constant time comparison for metrics viewEPSS 0.6%CVE-2026-47784HIGHIn memcached before 1.6.42, password data for SASL password database authentication has a timing side channel because memcmp is used by saslEPSS 0.5%CVE-2025-68621HIGHTrilium Notes has a Timing Attack Vulnerability in /api/login/syncEPSS 0.5%CVE-2021-21575MEDIUM Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability. EPSS 0.5%CVE-2024-47178HIGHbasic-auth-connect's callback uses time unsafe string comparisonEPSS 0.5%CVE-2024-7010HIGHTiming Attack in mudler/localaiEPSS 0.5%CVE-2024-2467MEDIUMPerl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)EPSS 0.5%CVE-2024-31074HIGHObservable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disclosure via neEPSS 0.5%CVE-2024-36405MEDIUMControl-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other optionsEPSS 0.5%CVE-2026-70658HIGHpay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifierEPSS 0.5%CVE-2026-6656HIGHCrypt::Password versions through 0.28 for Perl are susceptible to timing attacksEPSS 0.5%CVE-2026-23849MEDIUMFile Browser vulnerable to Username Enumeration via Timing Attack in /api/loginEPSS 0.5%CVE-2026-44255MEDIUMWazuh: Username Enumeration via Timing Side-ChannelEPSS 0.5%CVE-2026-23892MEDIUMOctoPrint has Timing Side-Channel Vulnerability in API Key AuthenticationEPSS 0.5%CVE-2026-54685MEDIUMFileBrowser Quantum has Username Enumeration via Authentication Timing Side-ChannelEPSS 0.5%CVE-2022-42288MEDIUMNVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, wEPSS 0.5%CVE-2024-45191MEDIUMAn issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes.EPSS 0.5%CVE-2024-22340MEDIUMIBM Common Cryptographic Architecture information disclosureEPSS 0.4%CVE-2024-3296MEDIUMRust-openssl: timing based side-channel can lead to a bleichenbacher style attackEPSS 0.4%