FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2025-03-31 16:45:40 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
d8e7e854-17fa-11e9-bef6-6805ca2fa271botan2 -- Side channel during ECC key generation

botan2 developers reports:

A timing side channel during ECC key generation could leak information about the high bits of the secret scalar. Such information allows an attacker to perform a brute force attack on the key somewhat more efficiently than they would otherwise. Found by Ján Jančár using ECTester.

Bug introduced in 1.11.20, fixed in 2.9.0


Discovery 2018-12-17
Entry 2019-01-27
botan2
< 2.9.0

https://botan.randombit.net/security.html#id1
CVE-2018-20187