CVE-2016-8871 | BDVDB-2026-79083 Detail

Description#

In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing channel which could given sufficient queries be used to recover plaintext, aka an "OAEP side channel" attack.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://botan.randombit.net/security.html
http://www.securityfocus.com/bid/94225

Exploit#

No public exploit known

History#

Version 12016-10-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.