Security Bulletin: A vulnerability in Open Source Botan affects IBM Netezza SQL Extensions

Summary

Open Source Botan is used by IBM Netezza SQL Extensions. IBM Netezza SQL Extensions has addressed the applicable CVE.

Vulnerability Details

CVEID: CVE-2017-14737**
DESCRIPTION:** Botan could allow a local attacker to obtain sensitive information, caused by a flaw in the cryptographic cache-based side channel in the RSA implementation. By sending a specially-crafted request, a local attacker could exploit this vulnerability to recover information about RSA secret keys.
CVSS Base Score: 6.2
CVSS Temporal Score: See <https://exchange.xforce.ibmcloud.com/vulnerabilities/132627&gt; for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

Affected Products and Versions

• IBM Netezza SQL Extensions 1.5.0.0 - 7.2.1.4

Remediation/Fixes

To resolve the reported CVE for IBM Netezza SQL Extensions, please upgrade to the following version:

Workarounds and Mitigations

None