CVE-2024-50382 Information disclosure in n/a

Medium 5.9 Published 23 Oct 2024 Updated 24 Oct 2024

Compiler-induced secret-dependent control flow in Botan's GHASH implementation may leak cryptographic secrets via timing side-channels on specific LLVM versions.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2024-50382?

CVE-2024-50382 is a medium-severity vulnerability in n/a, published on 23 Oct 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V.

Weakness: CWE-203

Which versions are affected by CVE-2024-50382?

It affects 1 product.

Linux distribution packages (1)

Botan openSUSE:Tumbleweed All versions 3.6.0-1.1

Products include Botan Project Botan.

How do I fix CVE-2024-50382?

Upgrade to a fixed version.

Is CVE-2024-50382 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-50382 exists.

Sources

Also known as AZL-51678, AZL-51707, DEBIAN-CVE-2024-50382, GHSA-p27h-83pf-6hh9, OESA-2024-2328, OESA-2024-2329 and 5 more.