CVE-2016-9243

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size

published March 27, 2017

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03464 · 89.0th percentile
Published
2017-03-27T17:00Z
EPSS history
Timeline
  • 27 MAR 17:00Z
    HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size
    cvelistv5