FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The last vuln.xml file processed by FreshPorts is:

Revision:  514293
Date:      2019-10-11
Time:      17:36:37Z
Committer: pi

List all Vulnerabilities, by package

List all Vulnerabilities, by date

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
d8e7e854-17fa-11e9-bef6-6805ca2fa271botan2 -- Side channel during ECC key generation

botan2 developers reports:

A timing side channel during ECC key generation could leak information about the high bits of the secret scalar. Such information allows an attacker to perform a brute force attack on the key somewhat more efficiently than they would otherwise. Found by Ján Jančár using ECTester.

Bug introduced in 1.11.20, fixed in 2.9.0


Discovery 2018-12-17
Entry 2019-01-27
botan2
lt 2.9.0

https://botan.randombit.net/security.html#id1
CVE-2018-20187