CVE-2016-2849 : Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algori

Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret keys via a timing side-channel attack.

Published 2016-05-13 14:59:11

Updated 2017-07-01 01:29:41

Source MITRE

View at NVD, CVE.org

Vulnerability category: Information leak

Products affected by CVE-2016-2849

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 24
cpe:2.3:o:fedoraproject:fedora:24:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.7
cpe:2.3:a:botan_project:botan:1.11.7:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.0
cpe:2.3:a:botan_project:botan:1.11.0:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.5
cpe:2.3:a:botan_project:botan:1.11.5:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.4
cpe:2.3:a:botan_project:botan:1.11.4:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.3
cpe:2.3:a:botan_project:botan:1.11.3:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.2
cpe:2.3:a:botan_project:botan:1.11.2:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.8
cpe:2.3:a:botan_project:botan:1.11.8:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.6
cpe:2.3:a:botan_project:botan:1.11.6:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.1
cpe:2.3:a:botan_project:botan:1.11.1:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.16
cpe:2.3:a:botan_project:botan:1.11.16:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.14
cpe:2.3:a:botan_project:botan:1.11.14:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.13
cpe:2.3:a:botan_project:botan:1.11.13:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.12
cpe:2.3:a:botan_project:botan:1.11.12:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.11
cpe:2.3:a:botan_project:botan:1.11.11:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.10
cpe:2.3:a:botan_project:botan:1.11.10:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.9
cpe:2.3:a:botan_project:botan:1.11.9:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.18
cpe:2.3:a:botan_project:botan:1.11.18:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.17
cpe:2.3:a:botan_project:botan:1.11.17:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.15
cpe:2.3:a:botan_project:botan:1.11.15:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.20
cpe:2.3:a:botan_project:botan:1.11.20:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.19
cpe:2.3:a:botan_project:botan:1.11.19:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.21
cpe:2.3:a:botan_project:botan:1.11.21:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.25
cpe:2.3:a:botan_project:botan:1.11.25:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.24
cpe:2.3:a:botan_project:botan:1.11.24:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.23
cpe:2.3:a:botan_project:botan:1.11.23:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.22
cpe:2.3:a:botan_project:botan:1.11.22:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.26
cpe:2.3:a:botan_project:botan:1.11.26:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.28
cpe:2.3:a:botan_project:botan:1.11.28:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.11.27
cpe:2.3:a:botan_project:botan:1.11.27:*:*:*:*:*:*:*
Matching versions
Botan Project » Botan » Version: 1.10.12
cpe:2.3:a:botan_project:botan:1.10.12:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2016-2849

EPSS FAQ

0.64%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 76 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-2849

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2016-2849

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-2849

http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183669.html

[SECURITY] Fedora 24 Update: botan-1.10.13-1.fc24

CVEs referencing this url
https://security.gentoo.org/glsa/201701-23

Botan: Multiple vulnerabilities (GLSA 201701-23) — Gentoo security

CVEs referencing this url
http://botan.randombit.net/security.html

Security Advisories — Botan
Vendor Advisory

CVEs referencing this url
http://marc.info/?l=botan-devel&m=146185420505943&w=2

'[botan-devel] Botan 1.10.13 released' - MARC
Vendor Advisory

CVEs referencing this url
http://www.debian.org/security/2016/dsa-3565

Debian -- Security Information -- DSA-3565-1 botan1.10

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2016-2849

Products affected by CVE-2016-2849

Exploit prediction scoring system (EPSS) score for CVE-2016-2849

CVSS scores for CVE-2016-2849

CWE ids for CVE-2016-2849

References for CVE-2016-2849