CyberSecBulletin

Unix4lyfe vulnerabilities

We track 1 vulnerability in Unix4lyfe products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 22, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest Unix4lyfe vulnerabilities

  • 9.8 Critical severity

    Darkhttpd: Observable Discrepancy

    CVE-2024-23771Unix4lyfeEPSS 1.05%

    darkhttpd before 1.15 uses strcmp (which is not constant time) to verify authentication, which makes it easier for remote attackers to bypass authentication via a timing side channel.