Описание
In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| botan | fixed | 2.17.3+dfsg-1 | package | |
| botan | no-dsa | buster | package | |
| botan1.10 | removed | package | ||
| botan1.10 | not-affected | stretch | package |
Примечания
https://github.com/randombit/botan/pull/2549
EPSS
Процентиль: 80%
0.01922
Низкий
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 5 лет назад
In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).
CVSS3: 9.8
nvd
больше 5 лет назад
In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).
CVSS3: 9.8
github
больше 4 лет назад
In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).
CVSS3: 9.8
altlinux
почти 6 лет назад
ALT-PU-2021-1113: package `libbotan` update to version 2.17.3-alt1
EPSS
Процентиль: 80%
0.01922
Низкий