Fallos del tipo CWE-208

192 resultados

Discrepância de Tempo Observável

A fraqueza ocorre quando o tempo de execução de uma operação sensível (como validação de senha, verificação de token ou decisão criptográfica) varia dependendo do resultado, permitindo um atacante inferir informações pela duração da resposta. Diferenças de milissegundos podem revelar se um palpite estava correto.

Ejemplo

Um sistema valida senha comparando string por string: se o primeiro caractere estiver errado, retorna erro imediatamente; se estiver certo, continua comparando o segundo. Um atacante mede o tempo de resposta e deduz o padrão correto caractere por caractere, sem precisar da senha correta.

Cómo mitigar

Use funções de comparação constante (ex: `crypto.timingSafeEqual()` em Node.js ou `hmac_equals()` em PHP) que levam o mesmo tempo independente do ponto de falha. Para operações complexas, adicione delays aleatórios ou processe sempre a operação completa antes de retornar resultado.

CVE-2024-56738MEDIUMGNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.EPSS 0.4%CVE-2026-59218MEDIUMOpen WebUI: Account enumeration via observable login timing discrepancyEPSS 0.4%CVE-2026-75589HIGHNet::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verifyEPSS 0.4%CVE-2024-21671LOWvantage6 username timing attackEPSS 0.4%CVE-2026-13758LOWCryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done pathEPSS 0.4%CVE-2024-24770MEDIUMUsername timing attack on recover password/MFA token in vantage6EPSS 0.4%CVE-2026-5086HIGHCrypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacksEPSS 0.4%CVE-2025-22234MEDIUMSpring Security - BCrypt Password Encoder maximum password length breaks timing attack mitigationEPSS 0.4%CVE-2026-47373HIGHCrypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacksEPSS 0.4%CVE-2026-27856HIGHDoveadm credentials are verified using direct comparison which is susceptible to timing oracle attack. An attacker can use this to determineEPSS 0.4%CVE-2023-40182LOWsilverware-io-issue-tracker server responds in a noticeably different amount of time depending if a given email address exists or notEPSS 0.4%CVE-2026-44061MEDIUMDES-ECB auth with timing side channelEPSS 0.4%CVE-2026-8794MEDIUMPaperCut NG/MF: User enumeration via timing attackEPSS 0.4%CVE-2026-28464HIGHOpenClaw < 2026.2.12 - Timing Attack in Hooks Token AuthenticationEPSS 0.4%CVE-2026-21713MEDIUMA flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timingEPSS 0.4%CVE-2026-32595MEDIUMTraefik: BasicAuth Middleware Timing Attack Allows Username EnumerationEPSS 0.4%CVE-2026-5419LOWGnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalEPSS 0.4%CVE-2025-70949HIGHAn observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel.EPSS 0.4%CVE-2025-49506HIGHApache Portable Runtime Utility: apr_password_validate() vulnerable to timing attackEPSS 0.4%CVE-2026-26717MEDIUMAn issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. The application used the non-constant time == operator for HMAC signaturEPSS 0.4%