PT-2024-7941 · Botan+4 · Botan+4
Published
2024-10-21
·
Updated
2026-03-29
·
CVE-2024-50382
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Botan versions prior to 3.6.0
Description
The issue is related to a component of the Botan cryptographic library, specifically in lib/utils/ghash/ghash.cpp, where there is a potential information disclosure due to inconsistency. This could allow a remote attacker to access confidential data. The problem arises from compiler-induced secret-dependent control flow in GHASH in AES-GCM, where a branch is used instead of an XOR with carry, particularly observed with certain versions of LLVM, such as Clang in LLVM 15 on RISC-V.
Recommendations
For Botan versions prior to 3.6.0, update to version 3.6.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the GHASH function in AES-GCM until a patch is available.
Exploit
Fix
Side Channel Attack
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Botan
Debian
Linuxmint
Red Os
Ubuntu