Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2017-14737
HistorySep 26, 2017 - 1:29 a.m.

CVE-2017-14737

2017-09-2601:29:00
Debian Security Bug Tracker
security-tracker.debian.org
13

EPSS

0

Percentile

5.1%

A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.

OSVersionArchitecturePackageVersionFilename
Debian9allbotan1.10< 1.10.16-1botan1.10_1.10.16-1_all.deb