CVE-2018-20187 Information disclosure in n/a
An attacker can derive secret key bits during ECC key generation via timing side-channels in the Botan library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-20187?
CVE-2018-20187 is a medium-severity vulnerability in n/a, published on 8 Mar 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about the high bits of the secret key, as the function to derive the public point from the secret scalar uses an unblinded Montgomery ladder whose loop iteration count depends on the bitlength of the secret. This issue affects only key generation, not ECDSA signatures or ECDH key agreement.
Weakness: CWE-320
Which versions are affected by CVE-2018-20187?
It affects 1 product.
Products include Botan Project Botan.
How do I fix CVE-2018-20187?
Upgrade to a fixed version.
Is CVE-2018-20187 being exploited?
There is no known exploitation of CVE-2018-20187 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as ALPINE-CVE-2018-20187, DEBIAN-CVE-2018-20187, GHSA-g9j4-hp3j-g668, UBUNTU-CVE-2018-20187.