Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2016-2849
HistoryMay 13, 2016 - 2:59 p.m.

CVE-2016-2849

2016-05-1314:59:00
Debian Security Bug Tracker
security-tracker.debian.org
11

EPSS

0.006

Percentile

79.2%

Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret keys via a timing side-channel attack.

OSVersionArchitecturePackageVersionFilename
Debian9allbotan1.10< 1.10.16-1botan1.10_1.10.16-1_all.deb