In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding     operations (base32, base58, base64, and hex). (CVE-2021-24115)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding
    operations (base32, base58, base64, and hex). (CVE-2021-24115)

This update for Botan fixes the following issues :

  - CVE-2021-24115 In Botan before 2.17.3, or this backport,     constant-time computations are not used for certain     decoding and encoding operations (boo#1182670)

ID	Name	Product	Family	Severity
259067	Linux Distros Unpatched Vulnerability : CVE-2021-24115	Nessus	Misc.	critical
423720	Alpine: multiple botan packages: security update to 2.17.3-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
423720	Alpine: multiple botan packages: security update to 2.17.3-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
403709	Alpine: botan: security update to 2.11.0-r6	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
403709	Alpine: botan: security update to 2.11.0-r6	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
403708	Alpine: botan: security update to 2.11.0-r4	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
403708	Alpine: botan: security update to 2.11.0-r4	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
149882	openSUSE Security Update : Botan (openSUSE-2021-765)	Nessus	SuSE Local Security Checks	critical

Detections

Analytics

CVE-2021-24115

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical