PatchTheCVEsha512crypt vulnerabilities and fixes
Recent CVEs affecting sha512crypt, with upgrade or downgrade steps. 1 tracked.
sha512crypt has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-02-19. Highest priority: CVE-2016-20013 (score 57/100).
- CVE-2016-20013 HIGH 7.5 UPGRADE UPGRADE sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because
FAQ
How do I fix sha512crypt vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sha512crypt being exploited right now?
None of the tracked sha512crypt CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sha512crypt CVE should I patch first?
CVE-2016-20013 currently ranks highest (57/100): sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because.