CVE-2024-50382: Medium severity Botan Botan vulnerability
Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/botanto a version that resolves this vulnerability.Fixed in 2.19.3+dfsg-1+deb12u1 - Upgrade
Upgrade
debian/botanto a version that resolves this vulnerability.Fixed in 2.19.5+dfsg-3 - Upgrade
Upgrade
debian/botanto a version that resolves this vulnerability.Fixed in 2.19.3+dfsg-1+deb12u1Fixed in 2.19.5+dfsg-4 - Upgrade
Upgrade
Botanto a version that resolves this vulnerability.Fixed in 3.6.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50382?
CVE-2024-50382 is a medium severity vulnerability due to compiler-induced secret-dependent control flow affecting AES-GCM in Botan.
How do I fix CVE-2024-50382?
To fix CVE-2024-50382, upgrade Botan to version 3.6.0 or later.
Which versions of Botan are affected by CVE-2024-50382?
CVE-2024-50382 affects Botan versions prior to 3.6.0.
What specific components of Botan are impacted by CVE-2024-50382?
CVE-2024-50382 impacts the GHASH implementation in the AES-GCM functionality of Botan.
What compilers are associated with CVE-2024-50382?
CVE-2024-50382 has been observed primarily when using Clang with LLVM 15 on RISC-V.