CVE-2023-41313

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-41313
The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.
CVSS

No CVSS.

References
Link Resource
http://www.openwall.com/lists/oss-security/2024/03/10/2 Mailing List
http://www.openwall.com/lists/oss-security/2024/03/10/2 Mailing List
https://lists.apache.org/thread/jqczy3vxzs6q6rz9o0626j5nks9fnv95 Mailing List Vendor Advisory
https://lists.apache.org/thread/jqczy3vxzs6q6rz9o0626j5nks9fnv95 Mailing List Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:apache:doris:*:*:*:*:*:*:*:*
History

30 Jun 2025, 12:14

Type Values Removed Values Added
CPE cpe:2.3:a:apache:doris:*:*:*:*:*:*:*:*
References () http://www.openwall.com/lists/oss-security/2024/03/10/2 - () http://www.openwall.com/lists/oss-security/2024/03/10/2 - Mailing List
References () https://lists.apache.org/thread/jqczy3vxzs6q6rz9o0626j5nks9fnv95 - () https://lists.apache.org/thread/jqczy3vxzs6q6rz9o0626j5nks9fnv95 - Mailing List, Vendor Advisory
First Time Apache
Apache doris

13 Feb 2025, 17:17

Type Values Removed Values Added
CWE CWE-208
Summary The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue. The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.

01 May 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/03/10/2 -

12 Mar 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-12 11:15

Updated : 2025-06-30 12:14

NVD link : CVE-2023-41313

Mitre link : CVE-2023-41313

JSON object : View

Products Affected

apache

  • doris
CWE

No CWE.