Non évaluée
The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction b...
CVE-2021-40529
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2021-40529 botan Corrigé dans: 2.17.3-r3
- Debian DEBIAN-CVE-2021-40529 botan Corrigé dans: 2.18.1+dfsg-3
Description d'origine La description telle que publiée par la source (souvent en anglais).
The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.
Références
- advisory eprint.iacr.org
- advisory ibm.github.io
- advisory security.gentoo.org
- patch github.com
- report ibm.github.io
- web lists.fedoraproject.org
- web lists.fedoraproject.org