Python Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability - CVE-2022-48566 - Vulnerability Database

Python

Python Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability - CVE-2022-48566

High

Reference: CVE-2022-48566

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-48566

Title: Python Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability

Overview:

An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest.