Vulnerabilities > CVE-2019-11578 - Cryptographic Issues vulnerability in Dhcpcd Project Dhcpcd

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

dhcpcd-project

CWE-310

NVD

Published: 2019-04-28

Updated: 2021-07-21

Summary

auth.c in dhcpcd before 7.2.1 allowed attackers to infer secrets by performing latency attacks.

Vulnerable Configurations

Part	Description	Count
Application	Dhcpcd_Project Dhcpcd Project Dhcpcd 4.0.0 Dhcpcd Project Dhcpcd 4.0.1 Dhcpcd Project Dhcpcd 4.0.2 Dhcpcd Project Dhcpcd 4.0.3 Dhcpcd Project Dhcpcd 4.0.4 Dhcpcd Project Dhcpcd 4.0.5 Dhcpcd Project Dhcpcd 4.0.6 Dhcpcd Project Dhcpcd 4.0.7 Dhcpcd Project Dhcpcd 4.0.8 Dhcpcd Project Dhcpcd 4.0.9 Dhcpcd Project Dhcpcd 4.0.10 Dhcpcd Project Dhcpcd 4.0.11 Dhcpcd Project Dhcpcd 4.0.12 Dhcpcd Project Dhcpcd 4.0.13 Dhcpcd Project Dhcpcd 4.0.14 Dhcpcd Project Dhcpcd 4.0.15 Dhcpcd Project Dhcpcd 5.0.0 Dhcpcd Project Dhcpcd 5.0.1 Dhcpcd Project Dhcpcd 5.0.2 Dhcpcd Project Dhcpcd 5.0.3 Dhcpcd Project Dhcpcd 5.0.4 Dhcpcd Project Dhcpcd 5.0.5 Dhcpcd Project Dhcpcd 5.0.6 Dhcpcd Project Dhcpcd 5.0.7 Dhcpcd Project Dhcpcd 5.0.8 Dhcpcd Project Dhcpcd 5.0.9 Dhcpcd Project Dhcpcd 5.1.0 Dhcpcd Project Dhcpcd 5.1.1 Dhcpcd Project Dhcpcd 5.1.2 Dhcpcd Project Dhcpcd 5.1.3 Dhcpcd Project Dhcpcd 5.1.4 Dhcpcd Project Dhcpcd 5.1.5 Dhcpcd Project Dhcpcd 5.2.0 Dhcpcd Project Dhcpcd 5.2.1 Dhcpcd Project Dhcpcd 5.2.2 Dhcpcd Project Dhcpcd 5.2.3 Dhcpcd Project Dhcpcd 5.2.4 Dhcpcd Project Dhcpcd 5.2.5 Dhcpcd Project Dhcpcd 5.2.6 Dhcpcd Project Dhcpcd 5.2.7 Dhcpcd Project Dhcpcd 5.2.8 Dhcpcd Project Dhcpcd 5.2.9 Dhcpcd Project Dhcpcd 5.2.10 Dhcpcd Project Dhcpcd 5.2.11 Dhcpcd Project Dhcpcd 5.2.12 Dhcpcd Project Dhcpcd 5.5.0 Dhcpcd Project Dhcpcd 5.5.1 Dhcpcd Project Dhcpcd 5.5.2 Dhcpcd Project Dhcpcd 5.5.3 Dhcpcd Project Dhcpcd 5.5.4 Dhcpcd Project Dhcpcd 5.5.5 Dhcpcd Project Dhcpcd 5.5.6 Dhcpcd Project Dhcpcd 5.6.0 Dhcpcd Project Dhcpcd 5.6.1 Dhcpcd Project Dhcpcd 5.6.2 Dhcpcd Project Dhcpcd 5.6.3 Dhcpcd Project Dhcpcd 5.6.4 Dhcpcd Project Dhcpcd 5.6.5 Dhcpcd Project Dhcpcd 5.6.6 Dhcpcd Project Dhcpcd 5.6.7 Dhcpcd Project Dhcpcd 5.6.8 Dhcpcd Project Dhcpcd 5.99.2 Dhcpcd Project Dhcpcd 5.99.3 Dhcpcd Project Dhcpcd 5.99.4 Dhcpcd Project Dhcpcd 5.99.5 Dhcpcd Project Dhcpcd 5.99.6 Dhcpcd Project Dhcpcd 5.99.7 Dhcpcd Project Dhcpcd 6.0.0 Dhcpcd Project Dhcpcd 6.0.1 Dhcpcd Project Dhcpcd 6.0.2 Dhcpcd Project Dhcpcd 6.0.3 Dhcpcd Project Dhcpcd 6.0.4 Dhcpcd Project Dhcpcd 6.0.5 Dhcpcd Project Dhcpcd 6.1.0 Dhcpcd Project Dhcpcd 6.2.0 Dhcpcd Project Dhcpcd 6.2.1 Dhcpcd Project Dhcpcd 6.3.0 Dhcpcd Project Dhcpcd 6.3.1 Dhcpcd Project Dhcpcd 6.3.2 Dhcpcd Project Dhcpcd 6.4.0 Dhcpcd Project Dhcpcd 6.4.1 Dhcpcd Project Dhcpcd 6.4.2 Dhcpcd Project Dhcpcd 6.4.3 Dhcpcd Project Dhcpcd 6.4.4 Dhcpcd Project Dhcpcd 6.4.5 Dhcpcd Project Dhcpcd 6.4.6 Dhcpcd Project Dhcpcd 6.4.7 Dhcpcd Project Dhcpcd 6.5.0 Dhcpcd Project Dhcpcd 6.5.1 Dhcpcd Project Dhcpcd 6.6.0 Dhcpcd Project Dhcpcd 6.6.1 Dhcpcd Project Dhcpcd 6.6.2 Dhcpcd Project Dhcpcd 6.6.3 Dhcpcd Project Dhcpcd 6.6.4 Dhcpcd Project Dhcpcd 6.6.5 Dhcpcd Project Dhcpcd 6.6.6 Dhcpcd Project Dhcpcd 6.6.7 Dhcpcd Project Dhcpcd 6.7.0 Dhcpcd Project Dhcpcd 6.7.1 Dhcpcd Project Dhcpcd 6.8.0 Dhcpcd Project Dhcpcd 6.8.1 Dhcpcd Project Dhcpcd 6.8.2 Dhcpcd Project Dhcpcd 6.9.0 Dhcpcd Project Dhcpcd 6.9.1 Dhcpcd Project Dhcpcd 6.9.2 Dhcpcd Project Dhcpcd 6.9.3 Dhcpcd Project Dhcpcd 6.9.4 Dhcpcd Project Dhcpcd 6.10.0 Dhcpcd Project Dhcpcd 6.10.1 Dhcpcd Project Dhcpcd 6.10.2 Dhcpcd Project Dhcpcd 6.10.3 Dhcpcd Project Dhcpcd 6.11.0 Dhcpcd Project Dhcpcd 6.11.1 Dhcpcd Project Dhcpcd 6.11.2 Dhcpcd Project Dhcpcd 6.11.3 Dhcpcd Project Dhcpcd 6.11.4 Dhcpcd Project Dhcpcd 6.11.5 Dhcpcd Project Dhcpcd 6.11.6 Dhcpcd Project Dhcpcd 7.0.0 Dhcpcd Project Dhcpcd 7.0.1 Dhcpcd Project Dhcpcd 7.0.2 Dhcpcd Project Dhcpcd 7.0.3 Dhcpcd Project Dhcpcd 7.0.4 Dhcpcd Project Dhcpcd 7.0.5 Dhcpcd Project Dhcpcd 7.0.6 Dhcpcd Project Dhcpcd 7.0.7 Dhcpcd Project Dhcpcd 7.0.8 Dhcpcd Project Dhcpcd 7.1.0 Dhcpcd Project Dhcpcd 7.1.1 Dhcpcd Project Dhcpcd 7.2.0	155

Common Weakness Enumeration (CWE)

CWE-310 - Cryptographic Issues

Common Attack Pattern Enumeration and Classification (CAPEC)

Signature Spoofing by Key Recreation
An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References