Every CVE Search/ Get API key

CVE-2018-12435

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA...

5.9 MediumFix available

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.49%Down 0.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.9

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Record
CVE-2018-12435
CVSS 3.0
5.9 MediumCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS 2.0
1.9 LowAV:L/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Record
CVE-2018-12435
Updated
2026-11-02
EUVDEUVD-2018-4406 No score

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Record
EUVD-2018-4406
Updated
2026-11-03
GitHub AdvisoriesGHSA-xwpq-mm7j-gvv6 5.9

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA...

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Record
GHSA-xwpq-mm7j-gvv6
CVSS 3.0
5.9 MediumCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
OSVALPINE-CVE-2018-12435 5.9

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Record
ALPINE-CVE-2018-12435
CVSS 3.0
5.9 MediumCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSV 5.9

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Record
CVE-2018-12435
CVSS 3.0
5.9 MediumCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2018-12435 5.9

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

Record
DEBIAN-CVE-2018-12435
CVSS 3.0
5.9 MediumCVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Updated
2026-11-02
OSVopenSUSE-SU-2024:10594-1 No score

Botan-2.18.1-1.3 on GA media

These are all security issues fixed in the Botan-2.18.1-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10594-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
botan
Alpine:v3.11
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Alpine:v3.12
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Alpine:v3.13
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Alpine:v3.14
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Alpine:v3.15
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Alpine:v3.16
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Alpine:v3.17
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Alpine:v3.18
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Alpine:v3.19
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Alpine:v3.20
 2.5.0 up to 2.7.0-r0
2.7.0-r0
Show 4 moreShow less
Affected packages
PackageAffectedFixed
botan
Alpine:v3.21
 2.5.0 up to 2.7.0-r0
2.7.0-r0
botan
Debian:12
 before 2.6.0-3
2.6.0-3
botan
Debian:13
 before 2.6.0-3
2.6.0-3
Botan
openSUSE:Tumbleweed
 before 2.18.1-1.3
2.18.1-1.3

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-12435 is a medium vulnerability (CVSS 5.9) in Botan Project Botan, published June 15, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in botan 2.7.0-r0.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open