Vulnerability Description
Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Related Weaknesses (CWE)
References
- https://github.com/robrwo/perl-Crypt-SaltedHash/commit/c07bfc5c23185b0667233d0f2
- https://metacpan.org/release/RRWO/Crypt-SaltedHash-0.10/changes
- http://www.openwall.com/lists/oss-security/2026/05/20/21
FAQ
What is CVE-2026-47373?
CVE-2026-47373 is a vulnerability with a CVSS score of 7.5 (HIGH). Crypt::SaltedHash versions through 0.09 for Perl is susceptible to timing attacks. These versions use Perl's built-in eq comparison. Discrepencies in timing could be used to guess the underlying hash...
How severe is CVE-2026-47373?
CVE-2026-47373 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-47373?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.