Fallos del tipo CWE-208

212 resultados

Discrepância de Tempo Observável

A fraqueza ocorre quando o tempo de execução de uma operação sensível (como validação de senha, verificação de token ou decisão criptográfica) varia dependendo do resultado, permitindo um atacante inferir informações pela duração da resposta. Diferenças de milissegundos podem revelar se um palpite estava correto.

Ejemplo

Um sistema valida senha comparando string por string: se o primeiro caractere estiver errado, retorna erro imediatamente; se estiver certo, continua comparando o segundo. Um atacante mede o tempo de resposta e deduz o padrão correto caractere por caractere, sem precisar da senha correta.

Cómo mitigar

Use funções de comparação constante (ex: `crypto.timingSafeEqual()` em Node.js ou `hmac_equals()` em PHP) que levam o mesmo tempo independente do ponto de falha. Para operações complexas, adicione delays aleatórios ou processe sempre a operação completa antes de retornar resultado.

CVE-2026-6656HIGHCrypt::Password versions through 0.28 for Perl are susceptible to timing attacksEPSS 0.5%CVE-2026-54875LOWNon-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-VEPSS 0.5%CVE-2026-23849MEDIUMFile Browser vulnerable to Username Enumeration via Timing Attack in /api/loginEPSS 0.5%CVE-2022-42288MEDIUMNVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, wEPSS 0.5%CVE-2024-14041HIGHML-KEM (Kyber) decapsulation leaks private key information through non-constant-time division in message decoding and ciphertext compression (KyberSlash)EPSS 0.5%CVE-2026-93434HIGHFireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration SecretsEPSS 0.5%CVE-2024-45191MEDIUMAn issue was discovered in Matrix libolm through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes.EPSS 0.5%CVE-2026-28464HIGHOpenClaw < 2026.2.12 - Timing Attack in Hooks Token AuthenticationEPSS 0.4%CVE-2026-85725MEDIUMLightRAG: Plaintext Passwords Compared Without Constant-Time FunctionEPSS 0.4%CVE-2026-55785LOWfree5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKAEPSS 0.4%CVE-2026-54872LOWTiming Side-Channel in Scalar Multiplication for Non-NIST EC CurvesEPSS 0.4%CVE-2024-22340MEDIUMIBM Common Cryptographic Architecture information disclosureEPSS 0.4%CVE-2026-95270MEDIUMdgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancyEPSS 0.4%CVE-2026-78500MEDIUMDimension Blind SSRF via Database Test Connection FeatureEPSS 0.4%CVE-2026-16731HIGHAuthentication and authorization bypass via cryptographic timing side-channel attack in StationScoutEPSS 0.4%CVE-2026-26717MEDIUMAn issue in OpenFUN Richie (LMS) in src/richie/apps/courses/api.py. The application used the non-constant time == operator for HMAC signaturEPSS 0.4%CVE-2026-23892MEDIUMOctoPrint has Timing Side-Channel Vulnerability in API Key AuthenticationEPSS 0.4%CVE-2026-53525HIGHWeeChat has Non-Constant-Time Password Hash Comparison in Relay AuthenticationEPSS 0.4%CVE-2026-72700HIGHGrav before 3.9.1 Timing Attack via Non-Constant-Time Token ComparisonEPSS 0.4%CVE-2025-46570LOWvLLM’s Chunk-Based Prefix Caching Vulnerable to Potential Timing Side-ChannelEPSS 0.4%