Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string
Vulnerability Description
String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string. As stated in the documentation: "If the lengths of the strings are different, because equals returns false right away the size of the secret string may be leaked (but not its contents)." This is similar to CVE-2020-36829
CVSS Information
N/A
Vulnerability Type
通过时间差异性导致的信息暴露
Vulnerability Title
MetaCPAN String::Compare::ConstantTime 安全漏洞
Vulnerability Description
MetaCPAN String::Compare::ConstantTime是MetaCPAN基金会的一个组件。 MetaCPAN String::Compare::ConstantTime 0.321及之前版本存在安全漏洞，该漏洞源于可能泄露秘密字符串长度的计时攻击。
CVSS Information
N/A
Vulnerability Type
N/A