Lucene search
+L

637 matches found

UbuntuCve
UbuntuCve
added 2021/09/06 7:15 p.m.30 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS6.2AI score0.01532EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/09/06 6:45 p.m.64 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

6.1AI score0.01532EPSS
SaveExploits1References7
AlpineLinux
AlpineLinux
added 2021/09/06 6:45 p.m.85 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS5.9AI score0.01532EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/09/06 6:45 p.m.67 views

CVE-2021-40529

The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the...

5.9CVSS5.7AI score0.01532EPSS
SaveExploits1
CVE
CVE
added 2021/09/06 6:45 p.m.166 views

CVE-2021-40529

The CVE-2021-40529 entry concerns the ElGamal implementation in Botan (through 2.18.1), used by Thunderbird and other products. A cross-configuration attack between two cryptographic libraries can lead to plaintext recovery by exploiting a dangerous combination of the receiver’s key prime and gen...

5.9CVSS5.7AI score0.01532EPSS
SaveExploits1References7Affected Software1
CNNVD
CNNVD
added 2021/09/06 12:00 a.m.13 views

Botan 加密问题漏洞

Botan is a library of cryptographic algorithms written in C++. It supports a variety of algorithms such as AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability exists in Botan 2.18.1 and earlier versions, which stems from the fact that a generator public key defined by the...

5.9CVSS7.4AI score0.01532EPSS
SaveExploits1References8
OSV
OSV
added 2021/05/25 12:05 p.m.5 views

OPENSUSE-SU-2021:0794-1 Security update for Botan

This update for Botan fixes the following issues: - CVE-2021-24115 In Botan before 2.17.3, or this backport, constant-time computations are not used for certain decoding and encoding operations boo1182670 This update was imported from the openSUSE:Leap:15.2:Update update project...

9.8CVSS9.5AI score0.01976EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/05/25 12:00 a.m.24 views

openSUSE Security Update : Botan (openSUSE-2021-765)

This update for Botan fixes the following issues : - CVE-2021-24115 In Botan before 2.17.3, or this backport, constant-time computations are not used for certain decoding and encoding operations boo1182670 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

9.8CVSS8.1AI score0.01976EPSS
SaveExploits0References2
OPENSUSE Linux
OPENSUSE Linux
added 2021/05/25 12:00 a.m.26 views

Security update for Botan (important)

openSUSE Security Update: Security update for Botan Announcement ID: openSUSE-SU-2021:0794-1 Rating: important References: 1182670 Cross-References: CVE-2021-24115 CVSS scores: CVE-2021-24115 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-24115 SUSE: 9.8...

9.8CVSS7.3AI score0.01976EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2021/05/24 12:00 a.m.12 views

openSUSE: Security Advisory for Botan (openSUSE-SU-2021:0765-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS9.6AI score0.01976EPSS
SaveExploits0References2
OSV
OSV
added 2021/05/22 5:04 a.m.4 views

OPENSUSE-SU-2021:0765-1 Security update for Botan

This update for Botan fixes the following issues: - CVE-2021-24115 In Botan before 2.17.3, or this backport, constant-time computations are not used for certain decoding and encoding operations boo1182670...

9.8CVSS9.5AI score0.01976EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2021/05/22 12:00 a.m.25 views

Security update for Botan (important)

openSUSE Security Update: Security update for Botan Announcement ID: openSUSE-SU-2021:0765-1 Rating: important References: 1182670 Cross-References: CVE-2021-24115 CVSS scores: CVE-2021-24115 NVD : 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2021-24115 SUSE: 9.8...

9.8CVSS7.2AI score0.01976EPSS
SaveExploits0References1
Veracode
Veracode
added 2021/02/23 3:43 a.m.22 views

Timing Attack

Botan is vulnerable to timing attack. The vulnerability exists becasue constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS2.4AI score0.01976EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/02/22 2:15 a.m.4 views

DEBIAN-CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS8.5AI score0.01976EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/22 2:15 a.m.11 views

AZL-44961 CVE-2021-24115 affecting package botan2 2.14.0-2

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS7.4AI score0.01976EPSS
SaveExploits0References1
OSV
OSV
added 2021/02/22 2:15 a.m.8 views

ALPINE-CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS7AI score0.01976EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/22 2:15 a.m.30 views

CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS0.01976EPSS
SaveExploits0References3
OSV
OSV
added 2021/02/22 2:15 a.m.22 views

CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS6.8AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2021/02/22 2:15 a.m.24 views

CVE-2021-24115

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

9.8CVSS7.2AI score0.01976EPSS
SaveExploits0References4
Prion
Prion
added 2021/02/22 2:15 a.m.17 views

Code injection

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations base32, base58, base64, and hex...

7.5CVSS9.4AI score0.01976EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder