PT-2019-10012 · Botan+1 · Botan+1

Ján Jančár · Published 2019-03-08 · Updated 2024-06-15 · CVE-2018-20187

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Botan versions prior to 2.9.0

Description: A side-channel issue was discovered that affects the ECC key generation process. An attacker capable of precisely measuring the time taken for key generation may be able to derive information about the high bits of the secret key. This is due to the use of an unblinded Montgomery ladder in the function to derive the public point from the secret scalar, whose loop iteration count depends on the bitlength of the secret. This issue only affects key generation and does not impact ECDSA signatures or ECDH key agreement.

Recommendations: For versions prior to 2.9.0, update to version 2.9.0 or later to resolve the issue. As a temporary workaround, consider implementing timing-based mitigations to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-320

Related Identifiers

ALT-PU-2019-1441

CVE-2018-20187

OPENSUSE-SU-2024:10594-1

Affected Products

Alt Linux

Botan

References · 27

• https://osv.dev/vulnerability/openSUSE-SU-2024:10594-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-20187 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2019-1441 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12435 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-20187 · Vendor Advisory
• https://botan.randombit.net/news.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-20187 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2018-20187 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-20187 · Security Note
• https://botan.randombit.net/security.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-20187 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-20187 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20187 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-20187 · Security Note
• https://github.com/randombit/botan/commit/70aa7303acfff9eefc24598c289a84db3579ebd1 · Note