CVE-2015-7827 Information disclosure in n/a
Remote attackers can recover plaintext via timing side-channels in PKCS#1 padding decoding, requiring an upgrade to Botan.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-7827?
CVE-2015-7827 is a high-severity vulnerability in Debian Debian Linux, published on 13 May 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct million-message attacks by measuring time differences, related to decoding of PKCS#1 padding.
Weakness: CWE-200
Which versions are affected by CVE-2015-7827?
It affects 3 products.
Products include Botan Project Botan, Debian Debian Linux, Fedoraproject Fedora.
How do I fix CVE-2015-7827?
Upgrade to a fixed version.
Is CVE-2015-7827 being exploited?
There is no known exploitation of CVE-2015-7827 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as GHSA-hqg9-gjhg-w3qg, UBUNTU-CVE-2015-7827.