PatchTheCVEsha256crypt vulnerabilities and fixes
Recent CVEs affecting sha256crypt, with upgrade or downgrade steps. 1 tracked.
sha256crypt has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-02-19. Highest priority: CVE-2016-20013 (score 57/100).
- CVE-2016-20013 HIGH 7.5 UPGRADE UPGRADE sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because
FAQ
How do I fix sha256crypt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sha256crypt being exploited right now?
None of the tracked sha256crypt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sha256crypt CVE should I patch first?
CVE-2016-20013 currently ranks highest (57/100): sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because.