Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2016-8871
HistoryOct 28, 2016 - 3:59 p.m.

CVE-2016-8871

2016-10-2815:59:00
Debian Security Bug Tracker
security-tracker.debian.org
8

EPSS

0.001

Percentile

21.9%

In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing channel which could given sufficient queries be used to recover plaintext, aka an “OAEP side channel” attack.

OSVersionArchitecturePackageVersionFilename
Debian9allbotan1.10< 1.10.16-1botan1.10_1.10.16-1_all.deb

EPSS

0.001

Percentile

21.9%

Related for DEBIANCVE:CVE-2016-8871