PatchTheCVEsha256crypt project vulnerabilities
Recent CVEs affecting sha256crypt project products. 1 tracked.
sha256crypt project has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-02-19. Highest priority: CVE-2016-20013 (score 57/100).
- CVE-2016-20013 HIGH 7.5 UPGRADE UPGRADE sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because
FAQ
How do I fix sha256crypt project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sha256crypt project being exploited right now?
None of the tracked sha256crypt project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sha256crypt project CVE should I patch first?
CVE-2016-20013 currently ranks highest (57/100): sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because.