https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:54:32.962960+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2017-20240 CVE-2017-20240 — Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks 2026-10-08T00:54:32.979401+00:00

Affected: ARODLAND Crypt::PBKDF2

Crypt::PBKDF2 versions before 0.261630 for Perl are vulnerable to timing attacks.

These versions use Perl's built-in eq comparison. Discrepancies in timing could be used to guess the underlying derived-key.