CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-20187

A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely measuring the time taken for ECC key generation may be able to derive information about the high bits of the secret key, as the function to derive the public point from the secret scalar uses an unblinded Montgomery ladder whose loop iteration count depends on the bitlength of the secret. This issue affects only key generation, not ECDSA signatures or ECDH key agreement.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 65.7%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2018-20187

Botan Project » Botan » Version: N/A

cpe:2.3:a:botan_project:botan:-
Botan Project » Botan » Version: 0.7.0

cpe:2.3:a:botan_project:botan:0.7.0
Botan Project » Botan » Version: 0.7.1

cpe:2.3:a:botan_project:botan:0.7.1
Botan Project » Botan » Version: 0.7.10

cpe:2.3:a:botan_project:botan:0.7.10
Botan Project » Botan » Version: 0.7.2

cpe:2.3:a:botan_project:botan:0.7.2
Botan Project » Botan » Version: 0.7.3

cpe:2.3:a:botan_project:botan:0.7.3
Botan Project » Botan » Version: 0.7.4

cpe:2.3:a:botan_project:botan:0.7.4
Botan Project » Botan » Version: 0.7.5

cpe:2.3:a:botan_project:botan:0.7.5
Botan Project » Botan » Version: 0.7.6

cpe:2.3:a:botan_project:botan:0.7.6
Botan Project » Botan » Version: 0.7.7

cpe:2.3:a:botan_project:botan:0.7.7
Botan Project » Botan » Version: 0.7.8

cpe:2.3:a:botan_project:botan:0.7.8
Botan Project » Botan » Version: 0.7.9

cpe:2.3:a:botan_project:botan:0.7.9
Botan Project » Botan » Version: 0.8.0

cpe:2.3:a:botan_project:botan:0.8.0
Botan Project » Botan » Version: 0.8.1

cpe:2.3:a:botan_project:botan:0.8.1
Botan Project » Botan » Version: 0.8.2

cpe:2.3:a:botan_project:botan:0.8.2
Botan Project » Botan » Version: 0.8.3

cpe:2.3:a:botan_project:botan:0.8.3
Botan Project » Botan » Version: 0.8.4

cpe:2.3:a:botan_project:botan:0.8.4
Botan Project » Botan » Version: 0.8.5

cpe:2.3:a:botan_project:botan:0.8.5
Botan Project » Botan » Version: 0.8.6

cpe:2.3:a:botan_project:botan:0.8.6
Botan Project » Botan » Version: 0.8.7

cpe:2.3:a:botan_project:botan:0.8.7
Botan Project » Botan » Version: 0.9.0

cpe:2.3:a:botan_project:botan:0.9.0
Botan Project » Botan » Version: 0.9.1

cpe:2.3:a:botan_project:botan:0.9.1
Botan Project » Botan » Version: 0.9.2

cpe:2.3:a:botan_project:botan:0.9.2
Botan Project » Botan » Version: 1.0.0

cpe:2.3:a:botan_project:botan:1.0.0
Botan Project » Botan » Version: 1.0.1

cpe:2.3:a:botan_project:botan:1.0.1
Botan Project » Botan » Version: 1.0.2

cpe:2.3:a:botan_project:botan:1.0.2
Botan Project » Botan » Version: 1.1.0

cpe:2.3:a:botan_project:botan:1.1.0
Botan Project » Botan » Version: 1.1.1

cpe:2.3:a:botan_project:botan:1.1.1
Botan Project » Botan » Version: 1.1.10

cpe:2.3:a:botan_project:botan:1.1.10
Botan Project » Botan » Version: 1.1.11

cpe:2.3:a:botan_project:botan:1.1.11
Botan Project » Botan » Version: 1.1.12

cpe:2.3:a:botan_project:botan:1.1.12
Botan Project » Botan » Version: 1.1.13

cpe:2.3:a:botan_project:botan:1.1.13
Botan Project » Botan » Version: 1.1.2

cpe:2.3:a:botan_project:botan:1.1.2
Botan Project » Botan » Version: 1.1.3

cpe:2.3:a:botan_project:botan:1.1.3
Botan Project » Botan » Version: 1.1.4

cpe:2.3:a:botan_project:botan:1.1.4
Botan Project » Botan » Version: 1.1.5

cpe:2.3:a:botan_project:botan:1.1.5
Botan Project » Botan » Version: 1.1.6

cpe:2.3:a:botan_project:botan:1.1.6
Botan Project » Botan » Version: 1.1.7

cpe:2.3:a:botan_project:botan:1.1.7
Botan Project » Botan » Version: 1.1.8

cpe:2.3:a:botan_project:botan:1.1.8
Botan Project » Botan » Version: 1.1.9

cpe:2.3:a:botan_project:botan:1.1.9
Botan Project » Botan » Version: 1.10.0

cpe:2.3:a:botan_project:botan:1.10.0
Botan Project » Botan » Version: 1.10.1

cpe:2.3:a:botan_project:botan:1.10.1
Botan Project » Botan » Version: 1.10.10

cpe:2.3:a:botan_project:botan:1.10.10
Botan Project » Botan » Version: 1.10.11

cpe:2.3:a:botan_project:botan:1.10.11
Botan Project » Botan » Version: 1.10.12

cpe:2.3:a:botan_project:botan:1.10.12
Botan Project » Botan » Version: 1.10.13

cpe:2.3:a:botan_project:botan:1.10.13
Botan Project » Botan » Version: 1.10.14

cpe:2.3:a:botan_project:botan:1.10.14
Botan Project » Botan » Version: 1.10.15

cpe:2.3:a:botan_project:botan:1.10.15
Botan Project » Botan » Version: 1.10.16

cpe:2.3:a:botan_project:botan:1.10.16
Botan Project » Botan » Version: 1.10.17

cpe:2.3:a:botan_project:botan:1.10.17
Botan Project » Botan » Version: 1.10.2

cpe:2.3:a:botan_project:botan:1.10.2
Botan Project » Botan » Version: 1.10.3

cpe:2.3:a:botan_project:botan:1.10.3
Botan Project » Botan » Version: 1.10.4

cpe:2.3:a:botan_project:botan:1.10.4
Botan Project » Botan » Version: 1.10.5

cpe:2.3:a:botan_project:botan:1.10.5
Botan Project » Botan » Version: 1.10.6

cpe:2.3:a:botan_project:botan:1.10.6
Botan Project » Botan » Version: 1.10.7

cpe:2.3:a:botan_project:botan:1.10.7
Botan Project » Botan » Version: 1.10.8

cpe:2.3:a:botan_project:botan:1.10.8
Botan Project » Botan » Version: 1.10.9

cpe:2.3:a:botan_project:botan:1.10.9
Botan Project » Botan » Version: 1.11.0

cpe:2.3:a:botan_project:botan:1.11.0
Botan Project » Botan » Version: 1.11.1

cpe:2.3:a:botan_project:botan:1.11.1
Botan Project » Botan » Version: 1.11.10

cpe:2.3:a:botan_project:botan:1.11.10
Botan Project » Botan » Version: 1.11.11

cpe:2.3:a:botan_project:botan:1.11.11
Botan Project » Botan » Version: 1.11.12

cpe:2.3:a:botan_project:botan:1.11.12
Botan Project » Botan » Version: 1.11.13

cpe:2.3:a:botan_project:botan:1.11.13
Botan Project » Botan » Version: 1.11.14

cpe:2.3:a:botan_project:botan:1.11.14
Botan Project » Botan » Version: 1.11.15

cpe:2.3:a:botan_project:botan:1.11.15
Botan Project » Botan » Version: 1.11.16

cpe:2.3:a:botan_project:botan:1.11.16
Botan Project » Botan » Version: 1.11.17

cpe:2.3:a:botan_project:botan:1.11.17
Botan Project » Botan » Version: 1.11.18

cpe:2.3:a:botan_project:botan:1.11.18
Botan Project » Botan » Version: 1.11.19

cpe:2.3:a:botan_project:botan:1.11.19
Botan Project » Botan » Version: 1.11.2

cpe:2.3:a:botan_project:botan:1.11.2
Botan Project » Botan » Version: 1.11.20

cpe:2.3:a:botan_project:botan:1.11.20
Botan Project » Botan » Version: 1.11.21

cpe:2.3:a:botan_project:botan:1.11.21
Botan Project » Botan » Version: 1.11.22

cpe:2.3:a:botan_project:botan:1.11.22
Botan Project » Botan » Version: 1.11.23

cpe:2.3:a:botan_project:botan:1.11.23
Botan Project » Botan » Version: 1.11.24

cpe:2.3:a:botan_project:botan:1.11.24
Botan Project » Botan » Version: 1.11.25

cpe:2.3:a:botan_project:botan:1.11.25
Botan Project » Botan » Version: 1.11.26

cpe:2.3:a:botan_project:botan:1.11.26
Botan Project » Botan » Version: 1.11.27

cpe:2.3:a:botan_project:botan:1.11.27
Botan Project » Botan » Version: 1.11.28

cpe:2.3:a:botan_project:botan:1.11.28
Botan Project » Botan » Version: 1.11.29

cpe:2.3:a:botan_project:botan:1.11.29
Botan Project » Botan » Version: 1.11.3

cpe:2.3:a:botan_project:botan:1.11.3
Botan Project » Botan » Version: 1.11.30

cpe:2.3:a:botan_project:botan:1.11.30
Botan Project » Botan » Version: 1.11.31

cpe:2.3:a:botan_project:botan:1.11.31
Botan Project » Botan » Version: 1.11.32

cpe:2.3:a:botan_project:botan:1.11.32
Botan Project » Botan » Version: 1.11.33

cpe:2.3:a:botan_project:botan:1.11.33
Botan Project » Botan » Version: 1.11.34

cpe:2.3:a:botan_project:botan:1.11.34
Botan Project » Botan » Version: 1.11.4

cpe:2.3:a:botan_project:botan:1.11.4
Botan Project » Botan » Version: 1.11.5

cpe:2.3:a:botan_project:botan:1.11.5
Botan Project » Botan » Version: 1.11.6

cpe:2.3:a:botan_project:botan:1.11.6
Botan Project » Botan » Version: 1.11.7

cpe:2.3:a:botan_project:botan:1.11.7
Botan Project » Botan » Version: 1.11.8

cpe:2.3:a:botan_project:botan:1.11.8
Botan Project » Botan » Version: 1.11.9

cpe:2.3:a:botan_project:botan:1.11.9
Botan Project » Botan » Version: 1.2.0

cpe:2.3:a:botan_project:botan:1.2.0
Botan Project » Botan » Version: 1.2.1

cpe:2.3:a:botan_project:botan:1.2.1
Botan Project » Botan » Version: 1.2.2

cpe:2.3:a:botan_project:botan:1.2.2
Botan Project » Botan » Version: 1.2.3

cpe:2.3:a:botan_project:botan:1.2.3
Botan Project » Botan » Version: 1.2.4

cpe:2.3:a:botan_project:botan:1.2.4
Botan Project » Botan » Version: 1.2.5

cpe:2.3:a:botan_project:botan:1.2.5
Botan Project » Botan » Version: 1.2.6

cpe:2.3:a:botan_project:botan:1.2.6
Botan Project » Botan » Version: 1.2.7

cpe:2.3:a:botan_project:botan:1.2.7
Botan Project » Botan » Version: 1.2.8

cpe:2.3:a:botan_project:botan:1.2.8
Botan Project » Botan » Version: 1.3.0

cpe:2.3:a:botan_project:botan:1.3.0
Botan Project » Botan » Version: 1.3.1

cpe:2.3:a:botan_project:botan:1.3.1
Botan Project » Botan » Version: 1.3.10

cpe:2.3:a:botan_project:botan:1.3.10
Botan Project » Botan » Version: 1.3.11

cpe:2.3:a:botan_project:botan:1.3.11
Botan Project » Botan » Version: 1.3.12

cpe:2.3:a:botan_project:botan:1.3.12
Botan Project » Botan » Version: 1.3.13

cpe:2.3:a:botan_project:botan:1.3.13
Botan Project » Botan » Version: 1.3.14

cpe:2.3:a:botan_project:botan:1.3.14
Botan Project » Botan » Version: 1.3.2

cpe:2.3:a:botan_project:botan:1.3.2
Botan Project » Botan » Version: 1.3.3

cpe:2.3:a:botan_project:botan:1.3.3
Botan Project » Botan » Version: 1.3.4

cpe:2.3:a:botan_project:botan:1.3.4
Botan Project » Botan » Version: 1.3.5

cpe:2.3:a:botan_project:botan:1.3.5
Botan Project » Botan » Version: 1.3.6

cpe:2.3:a:botan_project:botan:1.3.6
Botan Project » Botan » Version: 1.3.7

cpe:2.3:a:botan_project:botan:1.3.7
Botan Project » Botan » Version: 1.3.8

cpe:2.3:a:botan_project:botan:1.3.8
Botan Project » Botan » Version: 1.3.9

cpe:2.3:a:botan_project:botan:1.3.9
Botan Project » Botan » Version: 1.4.0

cpe:2.3:a:botan_project:botan:1.4.0
Botan Project » Botan » Version: 1.4.1

cpe:2.3:a:botan_project:botan:1.4.1
Botan Project » Botan » Version: 1.4.10

cpe:2.3:a:botan_project:botan:1.4.10
Botan Project » Botan » Version: 1.4.11

cpe:2.3:a:botan_project:botan:1.4.11
Botan Project » Botan » Version: 1.4.12

cpe:2.3:a:botan_project:botan:1.4.12
Botan Project » Botan » Version: 1.4.2

cpe:2.3:a:botan_project:botan:1.4.2
Botan Project » Botan » Version: 1.4.3

cpe:2.3:a:botan_project:botan:1.4.3
Botan Project » Botan » Version: 1.4.4

cpe:2.3:a:botan_project:botan:1.4.4
Botan Project » Botan » Version: 1.4.5

cpe:2.3:a:botan_project:botan:1.4.5
Botan Project » Botan » Version: 1.4.6

cpe:2.3:a:botan_project:botan:1.4.6
Botan Project » Botan » Version: 1.4.7

cpe:2.3:a:botan_project:botan:1.4.7
Botan Project » Botan » Version: 1.4.8

cpe:2.3:a:botan_project:botan:1.4.8
Botan Project » Botan » Version: 1.4.9

cpe:2.3:a:botan_project:botan:1.4.9
Botan Project » Botan » Version: 1.5.0

cpe:2.3:a:botan_project:botan:1.5.0
Botan Project » Botan » Version: 1.5.1

cpe:2.3:a:botan_project:botan:1.5.1
Botan Project » Botan » Version: 1.5.10

cpe:2.3:a:botan_project:botan:1.5.10
Botan Project » Botan » Version: 1.5.11

cpe:2.3:a:botan_project:botan:1.5.11
Botan Project » Botan » Version: 1.5.12

cpe:2.3:a:botan_project:botan:1.5.12
Botan Project » Botan » Version: 1.5.13

cpe:2.3:a:botan_project:botan:1.5.13
Botan Project » Botan » Version: 1.5.2

cpe:2.3:a:botan_project:botan:1.5.2
Botan Project » Botan » Version: 1.5.3

cpe:2.3:a:botan_project:botan:1.5.3
Botan Project » Botan » Version: 1.5.4

cpe:2.3:a:botan_project:botan:1.5.4
Botan Project » Botan » Version: 1.5.5

cpe:2.3:a:botan_project:botan:1.5.5
Botan Project » Botan » Version: 1.5.6

cpe:2.3:a:botan_project:botan:1.5.6
Botan Project » Botan » Version: 1.5.7

cpe:2.3:a:botan_project:botan:1.5.7
Botan Project » Botan » Version: 1.5.8

cpe:2.3:a:botan_project:botan:1.5.8
Botan Project » Botan » Version: 1.5.9

cpe:2.3:a:botan_project:botan:1.5.9
Botan Project » Botan » Version: 1.6.0

cpe:2.3:a:botan_project:botan:1.6.0
Botan Project » Botan » Version: 1.6.1

cpe:2.3:a:botan_project:botan:1.6.1
Botan Project » Botan » Version: 1.6.2

cpe:2.3:a:botan_project:botan:1.6.2
Botan Project » Botan » Version: 1.6.3

cpe:2.3:a:botan_project:botan:1.6.3
Botan Project » Botan » Version: 1.6.4

cpe:2.3:a:botan_project:botan:1.6.4
Botan Project » Botan » Version: 1.6.5

cpe:2.3:a:botan_project:botan:1.6.5
Botan Project » Botan » Version: 1.7.0

cpe:2.3:a:botan_project:botan:1.7.0
Botan Project » Botan » Version: 1.7.1

cpe:2.3:a:botan_project:botan:1.7.1
Botan Project » Botan » Version: 1.7.10

cpe:2.3:a:botan_project:botan:1.7.10
Botan Project » Botan » Version: 1.7.11

cpe:2.3:a:botan_project:botan:1.7.11
Botan Project » Botan » Version: 1.7.12

cpe:2.3:a:botan_project:botan:1.7.12
Botan Project » Botan » Version: 1.7.13

cpe:2.3:a:botan_project:botan:1.7.13
Botan Project » Botan » Version: 1.7.14

cpe:2.3:a:botan_project:botan:1.7.14
Botan Project » Botan » Version: 1.7.15

cpe:2.3:a:botan_project:botan:1.7.15
Botan Project » Botan » Version: 1.7.16

cpe:2.3:a:botan_project:botan:1.7.16
Botan Project » Botan » Version: 1.7.17

cpe:2.3:a:botan_project:botan:1.7.17
Botan Project » Botan » Version: 1.7.18

cpe:2.3:a:botan_project:botan:1.7.18
Botan Project » Botan » Version: 1.7.19

cpe:2.3:a:botan_project:botan:1.7.19
Botan Project » Botan » Version: 1.7.2

cpe:2.3:a:botan_project:botan:1.7.2
Botan Project » Botan » Version: 1.7.20

cpe:2.3:a:botan_project:botan:1.7.20
Botan Project » Botan » Version: 1.7.21

cpe:2.3:a:botan_project:botan:1.7.21
Botan Project » Botan » Version: 1.7.22

cpe:2.3:a:botan_project:botan:1.7.22
Botan Project » Botan » Version: 1.7.23

cpe:2.3:a:botan_project:botan:1.7.23
Botan Project » Botan » Version: 1.7.24

cpe:2.3:a:botan_project:botan:1.7.24
Botan Project » Botan » Version: 1.7.3

cpe:2.3:a:botan_project:botan:1.7.3
Botan Project » Botan » Version: 1.7.4

cpe:2.3:a:botan_project:botan:1.7.4
Botan Project » Botan » Version: 1.7.5

cpe:2.3:a:botan_project:botan:1.7.5
Botan Project » Botan » Version: 1.7.6

cpe:2.3:a:botan_project:botan:1.7.6
Botan Project » Botan » Version: 1.7.7

cpe:2.3:a:botan_project:botan:1.7.7
Botan Project » Botan » Version: 1.7.8

cpe:2.3:a:botan_project:botan:1.7.8
Botan Project » Botan » Version: 1.7.9

cpe:2.3:a:botan_project:botan:1.7.9
Botan Project » Botan » Version: 1.8.0

cpe:2.3:a:botan_project:botan:1.8.0
Botan Project » Botan » Version: 1.8.1

cpe:2.3:a:botan_project:botan:1.8.1
Botan Project » Botan » Version: 1.8.10

cpe:2.3:a:botan_project:botan:1.8.10
Botan Project » Botan » Version: 1.8.11

cpe:2.3:a:botan_project:botan:1.8.11
Botan Project » Botan » Version: 1.8.12

cpe:2.3:a:botan_project:botan:1.8.12
Botan Project » Botan » Version: 1.8.13

cpe:2.3:a:botan_project:botan:1.8.13
Botan Project » Botan » Version: 1.8.14

cpe:2.3:a:botan_project:botan:1.8.14
Botan Project » Botan » Version: 1.8.15

cpe:2.3:a:botan_project:botan:1.8.15
Botan Project » Botan » Version: 1.8.2

cpe:2.3:a:botan_project:botan:1.8.2
Botan Project » Botan » Version: 1.8.3

cpe:2.3:a:botan_project:botan:1.8.3
Botan Project » Botan » Version: 1.8.4

cpe:2.3:a:botan_project:botan:1.8.4
Botan Project » Botan » Version: 1.8.5

cpe:2.3:a:botan_project:botan:1.8.5
Botan Project » Botan » Version: 1.8.6

cpe:2.3:a:botan_project:botan:1.8.6
Botan Project » Botan » Version: 1.8.7

cpe:2.3:a:botan_project:botan:1.8.7
Botan Project » Botan » Version: 1.8.8

cpe:2.3:a:botan_project:botan:1.8.8
Botan Project » Botan » Version: 1.8.9

cpe:2.3:a:botan_project:botan:1.8.9
Botan Project » Botan » Version: 1.9.0

cpe:2.3:a:botan_project:botan:1.9.0
Botan Project » Botan » Version: 1.9.1

cpe:2.3:a:botan_project:botan:1.9.1
Botan Project » Botan » Version: 1.9.10

cpe:2.3:a:botan_project:botan:1.9.10
Botan Project » Botan » Version: 1.9.11

cpe:2.3:a:botan_project:botan:1.9.11
Botan Project » Botan » Version: 1.9.12

cpe:2.3:a:botan_project:botan:1.9.12
Botan Project » Botan » Version: 1.9.13

cpe:2.3:a:botan_project:botan:1.9.13
Botan Project » Botan » Version: 1.9.14

cpe:2.3:a:botan_project:botan:1.9.14
Botan Project » Botan » Version: 1.9.15

cpe:2.3:a:botan_project:botan:1.9.15
Botan Project » Botan » Version: 1.9.16

cpe:2.3:a:botan_project:botan:1.9.16
Botan Project » Botan » Version: 1.9.17

cpe:2.3:a:botan_project:botan:1.9.17
Botan Project » Botan » Version: 1.9.18

cpe:2.3:a:botan_project:botan:1.9.18
Botan Project » Botan » Version: 1.9.2

cpe:2.3:a:botan_project:botan:1.9.2
Botan Project » Botan » Version: 1.9.3

cpe:2.3:a:botan_project:botan:1.9.3
Botan Project » Botan » Version: 1.9.4

cpe:2.3:a:botan_project:botan:1.9.4
Botan Project » Botan » Version: 1.9.5

cpe:2.3:a:botan_project:botan:1.9.5
Botan Project » Botan » Version: 1.9.6

cpe:2.3:a:botan_project:botan:1.9.6
Botan Project » Botan » Version: 1.9.7

cpe:2.3:a:botan_project:botan:1.9.7
Botan Project » Botan » Version: 1.9.8

cpe:2.3:a:botan_project:botan:1.9.8
Botan Project » Botan » Version: 1.9.9

cpe:2.3:a:botan_project:botan:1.9.9
Botan Project » Botan » Version: 2.0.0

cpe:2.3:a:botan_project:botan:2.0.0
Botan Project » Botan » Version: 2.0.1

cpe:2.3:a:botan_project:botan:2.0.1
Botan Project » Botan » Version: 2.1.0

cpe:2.3:a:botan_project:botan:2.1.0
Botan Project » Botan » Version: 2.2.0

cpe:2.3:a:botan_project:botan:2.2.0
Botan Project » Botan » Version: 2.3.0

cpe:2.3:a:botan_project:botan:2.3.0
Botan Project » Botan » Version: 2.4.0

cpe:2.3:a:botan_project:botan:2.4.0
Botan Project » Botan » Version: 2.5.0

cpe:2.3:a:botan_project:botan:2.5.0
Botan Project » Botan » Version: 2.6.0

cpe:2.3:a:botan_project:botan:2.6.0
Botan Project » Botan » Version: 2.7.0

cpe:2.3:a:botan_project:botan:2.7.0
Botan Project » Botan » Version: 2.8.0

cpe:2.3:a:botan_project:botan:2.8.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-20187

Products

Pricing

Contact Us