by Kastro
Paper/Archive/CVE-2021-24115

CVE-2021-24115

mitre — In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and…

EPSS 2%CVSS 9.8
critical.is priorityof 100
45
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 79.9.799 × 2016.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgithub.com/randombit/botan/compare/2.17.2...2.17.3refgithub.com/randombit/botan/pull/2549refbotan.randombit.net/news.html