critical9.8
CVE-2021-24115
In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).
Impact
In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Botan Project | Botan | before 2.17.3 |
References
- NVD record
- CVE.org record
- https://botan.randombit.net/news.html
- https://github.com/randombit/botan/compare/2.17.2...2.17.3
- https://github.com/randombit/botan/pull/2549
- https://botan.randombit.net/news.html
- https://github.com/randombit/botan/compare/2.17.2...2.17.3
- https://github.com/randombit/botan/pull/2549