CVE-2016-2849 Information disclosure in n/a
Remote attackers can recover ECDSA secret keys via timing side-channel attacks due to non-constant-time modular inverse operations in the Botan library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2016-2849?
CVE-2016-2849 is a high-severity vulnerability in Debian Debian Linux, published on 13 May 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret keys via a timing side-channel attack.
Weakness: CWE-200
Which versions are affected by CVE-2016-2849?
It affects 3 products.
Products include Botan Project Botan, Debian Debian Linux, Fedoraproject Fedora.
How do I fix CVE-2016-2849?
Upgrade to a fixed version.
Is CVE-2016-2849 being exploited?
There is no known exploitation of CVE-2016-2849 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as GHSA-pfgh-27pp-8vx8, UBUNTU-CVE-2016-2849.