CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2849

Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret keys via a timing side-channel attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.1%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2016-2849

Botan Project » Botan » Version: 1.10.12

cpe:2.3:a:botan_project:botan:1.10.12
Botan Project » Botan » Version: 1.11.0

cpe:2.3:a:botan_project:botan:1.11.0
Botan Project » Botan » Version: 1.11.1

cpe:2.3:a:botan_project:botan:1.11.1
Botan Project » Botan » Version: 1.11.10

cpe:2.3:a:botan_project:botan:1.11.10
Botan Project » Botan » Version: 1.11.11

cpe:2.3:a:botan_project:botan:1.11.11
Botan Project » Botan » Version: 1.11.12

cpe:2.3:a:botan_project:botan:1.11.12
Botan Project » Botan » Version: 1.11.13

cpe:2.3:a:botan_project:botan:1.11.13
Botan Project » Botan » Version: 1.11.14

cpe:2.3:a:botan_project:botan:1.11.14
Botan Project » Botan » Version: 1.11.15

cpe:2.3:a:botan_project:botan:1.11.15
Botan Project » Botan » Version: 1.11.16

cpe:2.3:a:botan_project:botan:1.11.16
Botan Project » Botan » Version: 1.11.17

cpe:2.3:a:botan_project:botan:1.11.17
Botan Project » Botan » Version: 1.11.18

cpe:2.3:a:botan_project:botan:1.11.18
Botan Project » Botan » Version: 1.11.19

cpe:2.3:a:botan_project:botan:1.11.19
Botan Project » Botan » Version: 1.11.2

cpe:2.3:a:botan_project:botan:1.11.2
Botan Project » Botan » Version: 1.11.20

cpe:2.3:a:botan_project:botan:1.11.20
Botan Project » Botan » Version: 1.11.21

cpe:2.3:a:botan_project:botan:1.11.21
Botan Project » Botan » Version: 1.11.22

cpe:2.3:a:botan_project:botan:1.11.22
Botan Project » Botan » Version: 1.11.23

cpe:2.3:a:botan_project:botan:1.11.23
Botan Project » Botan » Version: 1.11.24

cpe:2.3:a:botan_project:botan:1.11.24
Botan Project » Botan » Version: 1.11.25

cpe:2.3:a:botan_project:botan:1.11.25
Botan Project » Botan » Version: 1.11.26

cpe:2.3:a:botan_project:botan:1.11.26
Botan Project » Botan » Version: 1.11.27

cpe:2.3:a:botan_project:botan:1.11.27
Botan Project » Botan » Version: 1.11.28

cpe:2.3:a:botan_project:botan:1.11.28
Botan Project » Botan » Version: 1.11.3

cpe:2.3:a:botan_project:botan:1.11.3
Botan Project » Botan » Version: 1.11.4

cpe:2.3:a:botan_project:botan:1.11.4
Botan Project » Botan » Version: 1.11.5

cpe:2.3:a:botan_project:botan:1.11.5
Botan Project » Botan » Version: 1.11.6

cpe:2.3:a:botan_project:botan:1.11.6
Botan Project » Botan » Version: 1.11.7

cpe:2.3:a:botan_project:botan:1.11.7
Botan Project » Botan » Version: 1.11.8

cpe:2.3:a:botan_project:botan:1.11.8
Botan Project » Botan » Version: 1.11.9

cpe:2.3:a:botan_project:botan:1.11.9
Debian » Debian Linux » Version: 8.0

cpe:2.3:o:debian:debian_linux:8.0
Fedoraproject » Fedora » Version: 24

cpe:2.3:o:fedoraproject:fedora:24

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2016-2849

Products

Pricing

Contact Us