CVE-2016-20013

CVE Details

CVE-2016-20013

Last Update

08/16/2024

NIST CVE Summary

sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is proportional to the square of the length of the password.

Our Official Summary

Spectro Cloud Offical Summary Coming Soon

CVE Severity

7.5

Status

Ongoing

Affected Products & Versions

• Palette VerteX 4.4.14, 4.4.18
• Palette Enterprise 4.4.18

Revision History

• 1.0 08/16/2024 Initial Publication
• 2.0 08/17/2024 Added Palette VerteX 4.4.14 to Affected Products
• 3.0 09/17/2024 Added Palette VerteX 4.4.18 & Palette Enterprise 4.4.18 to Affected Products