Lucene search
Veracode Vulnerability DatabaseVERACODE:32064HistorySep 12, 2021 - 1:25 p.m.
Information Disclosure
2021-09-1213:25:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
botan
vulnerability
plaintext
key disclosure
software
EPSS
0.003
Percentile
68.7%
botan is vulnerable to information disclosure. The vulnerability exists due to the system allowing plaintext recovery of the public key.
References
eprint.iacr.org/2021/923
github.com/randombit/botan/pull/2790
ibm.github.io/system-security-research-updates/2021/07/20/insecurity-elgamal-pt1
ibm.github.io/system-security-research-updates/2021/09/06/insecurity-elgamal-pt2
lists.fedoraproject.org/archives/list/[email protected]/message/72NB4OLD3VHJC3YF3PEP2HKF6BYURPAO/
lists.fedoraproject.org/archives/list/[email protected]/message/UPHGYWNJQKWLTUWBNSFB4F66MQDIL3IB/
security-tracker.debian.org/tracker/CVE-2021-40529
security.gentoo.org/glsa/202208-14
Related
fedora
fedora
[SECURITY] Fedora 35 Update: botan2-2.18.2-1.fc35
2021-11-12 00:38:33
[SECURITY] Fedora 34 Update: botan2-2.17.3-4.fc34
2021-11-16 15:40:58
prion
prion
Cross site scripting
2021-09-06 19:15:00
cvelist
cvelist
CVE-2021-40529
2021-09-06 18:45:08
mageia
mageia
Updated botan2 packages fix security vulnerability
2021-12-19 15:26:08
debiancve
debiancve
CVE-2021-40529
2021-09-06 19:15:07
openvas
openvas
Fedora: Security Advisory for botan2 (FEDORA-2021-8d51cac49f)
2021-11-18 00:00:00
Mageia: Security Advisory (MGASA-2021-0563)
2022-01-28 00:00:00
Fedora: Security Advisory for botan2 (FEDORA-2021-14b0d97496)
2021-11-14 00:00:00
gitlab
gitlab
Use of a Broken or Risky Cryptographic Algorithm
2021-09-06 00:00:00
nvd
nvd
CVE-2021-40529
2021-09-06 19:15:07
cve
cve
CVE-2021-40529
2021-09-06 19:15:07
osv
osv
CVE-2021-40529
2021-09-06 19:15:07
Botan-2.18.2-1.1 on GA media
2024-06-15 00:00:00
MozillaThunderbird-91.4.0-1.1 on GA media
2024-06-15 00:00:00
alpinelinux
alpinelinux
CVE-2021-40529
2021-09-06 19:15:07
ubuntucve
ubuntucve
CVE-2021-40529
2021-09-06 00:00:00
suse
suse
Security update for MozillaThunderbird (important)
2021-12-22 00:00:00
Security update for MozillaThunderbird (important)
2021-12-29 00:00:00
nessus
nessus
openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2021:1635-1)
2021-12-30 00:00:00
openSUSE 15 Security Update : MozillaThunderbird (openSUSE-SU-2021:4150-1)
2021-12-25 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2022-08-10 00:00:00