CVE-2017-14737
EUVD-2017-623326.09.2017, 01:29
A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| botan_project | botan | 𝑥 ≤ 1.10.16 |
| botan_project | botan | 1.11.0 |
| botan_project | botan | 1.11.1 |
| botan_project | botan | 1.11.2 |
| botan_project | botan | 1.11.3 |
| botan_project | botan | 1.11.4 |
| botan_project | botan | 1.11.5 |
| botan_project | botan | 1.11.6 |
| botan_project | botan | 1.11.7 |
| botan_project | botan | 1.11.8 |
| botan_project | botan | 1.11.9 |
| botan_project | botan | 1.11.10 |
| botan_project | botan | 1.11.11 |
| botan_project | botan | 1.11.12 |
| botan_project | botan | 1.11.13 |
| botan_project | botan | 1.11.14 |
| botan_project | botan | 1.11.15 |
| botan_project | botan | 1.11.16 |
| botan_project | botan | 1.11.17 |
| botan_project | botan | 1.11.18 |
| botan_project | botan | 1.11.19 |
| botan_project | botan | 1.11.20 |
| botan_project | botan | 1.11.21 |
| botan_project | botan | 1.11.22 |
| botan_project | botan | 1.11.23 |
| botan_project | botan | 1.11.24 |
| botan_project | botan | 1.11.25 |
| botan_project | botan | 1.11.26 |
| botan_project | botan | 1.11.27 |
| botan_project | botan | 1.11.28 |
| botan_project | botan | 1.11.33 |
| botan_project | botan | 1.11.34 |
| botan_project | botan | 2.0.0 |
| botan_project | botan | 2.0.1 |
| botan_project | botan | 2.1.0 |
| botan_project | botan | 2.2.0 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References