Bug 2321470 (CVE-2024-50383) - CVE-2024-50383 botan: compiler-induced side channel in lib/utils/donna128.h
Summary: CVE-2024-50383 botan: compiler-induced side channel in lib/utils/donna128.h
Keywords:
Status: NEW
Alias: CVE-2024-50383
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2321555 2321556 2321557
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-10-24 10:25 UTC by OSIDB Bzimport
Modified: 2024-10-24 17:07 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-10-24 10:25:46 UTC 
Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)
Note You need to log in before you can comment on or make changes to this bug.