CVE-2018-12435 Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cp...
MediumCVSS 5.9
EPSS 0.49%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/botan(Debian:12) | < 2.6.0-3 | 2.6.0-3 |
| debian/botan(Debian:13) | < 2.6.0-3 | 2.6.0-3 |
| botan project botan | >= 2.5.0, <= 2.7.0 | No fix listed |
| alpine/botan(Alpine:v3.10) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.11) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.12) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.13) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.14) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.15) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.16) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.17) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.18) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.19) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.20) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
| alpine/botan(Alpine:v3.21) | >= 2.5.0, < 2.7.0-r0 | 2.7.0-r0 |
References
- Debian Security Tracker CVE-2018-12435 vendor-advisory
- botan.randombit.net third-party-advisory
- github.com patch third-party-advisory
- www.nccgroup.trust exploit third-party-advisory
- security.alpinelinux.org vendor-advisory
- bugs.debian.org issue-tracking