{"id":"CVE-2017-14737","aliases":["DEBIAN-CVE-2017-14737","DLA-1125-1","DLA-2812-1","EUVD-2017-6233","GHSA-xr8r-2cxg-2rgp","MGASA-2017-0422","SUSE-SU-2017:2855-1","UBUNTU-CVE-2017-14737","openSUSE-SU-2024:10594-1"],"status":"published","title":"A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1...","description":"A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00318,"percentile":0.24929,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-09-26T01:00:00Z","modified":"2026-10-20T10:48:12Z","fixes":[{"ecosystem":"Debian:7","package":"botan1.10","fixed_in":["1.10.5-1+deb7u4"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"botan1.10","fixed_in":["1.10.17-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"botan","fixed_in":["1.10.17-1.mga5"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"botan","fixed_in":["1.10.17-1.mga6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"Botan","fixed_in":["1.10.9-4.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"Botan","fixed_in":["1.10.9-4.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"botan1.10","fixed_in":["1.10.5-1+deb7u1ubuntu0.14.04.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"botan1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-1+deb7u4"}]}],"versions":["1.10.5-1","1.10.5-1+deb7u1","1.10.5-1+deb7u2","1.10.5-1+deb7u3"]},{"source":"osv","ecosystem":"Debian:9","package":"botan1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.17-1+deb9u1"}]}],"versions":["1.10.16-1","1.10.17-0.1"]},{"source":"osv","ecosystem":"Mageia:5","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.17-1.mga5"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.17-1.mga6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"Botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.9-4.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"Botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.9-4.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"botan1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-1+deb7u1ubuntu0.14.04.1+esm1"}]}],"versions":["1.10.5-1","1.10.5-1ubuntu1","1.10.5-1+deb7u1ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"botan1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.10-6","1.10.12-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"Botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.18.1-1.3"}]}],"bundled":7}],"products":[{"vendor":"botan_project","product":"botan"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://www.usenix.org/conference/usenixsecurity17/technical-sessions/presentation/wang-shuai","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://github.com/randombit/botan/issues/1222","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/11/msg00006.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-14737"},{"url":"https://github.com/advisories/GHSA-xr8r-2cxg-2rgp"},{"url":"https://advisories.mageia.org/MGASA-2017-0422.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21938","tags":["report"]},{"url":"https://botan.randombit.net/security.html","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/RPHA5S6ZQM46XJ2CGDEETO6U6I6M5NEG/","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172855-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1060433","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14737","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-14737","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-14737","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9132","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9127","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9860","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-14737","description":"A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.","status":"published","published":"2017-09-26T01:00:00Z","modified":"2024-08-05T19:34:39.919Z","updated_at":"2026-11-02T14:33:11.928814Z"}],"euvd":[{"id":"EUVD-2017-6233","description":"A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.","status":"published","published":"2017-09-26T01:00:00Z","modified":"2024-08-05T19:34:39Z","updated_at":"2026-11-03T02:23:16.177631Z"}],"ghsa":[{"id":"GHSA-xr8r-2cxg-2rgp","title":"A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1...","description":"A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.","status":"published","published":"2022-05-13T01:04:38Z","modified":"2023-02-01T05:02:52Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:49:58.981291Z"}],"nvd":[{"id":"CVE-2017-14737","description":"A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.","status":"published","published":"2017-09-26T01:29:03.303Z","modified":"2026-06-17T01:06:42.15Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:03:59.716532Z"}],"osv":[{"id":"CVE-2017-14737","description":"A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.","status":"published","published":"2017-09-26T01:29:03.303Z","modified":"2026-10-20T10:48:12.822505529Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:04.572713Z"},{"id":"UBUNTU-CVE-2017-14737","description":"A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1.11.x and 2.x before 2.3.0, allows a local attacker to recover information about RSA secret keys, as demonstrated by CacheD. This occurs because an array is indexed with bits derived from a secret key.","status":"published","published":"2017-09-26T01:29:00Z","modified":"2026-04-22T11:16:16.872074Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:14.563448Z"},{"id":"DLA-1125-1","title":"botan1.10 - security update","status":"published","published":"2017-10-06T00:00:00Z","modified":"2026-03-09T01:01:32.197654Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DLA-2812-1","title":"botan1.10 - security update","status":"published","published":"2021-11-08T00:00:00Z","modified":"2026-03-09T01:19:56.028658Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2017-0422","title":"Updated botan packages fix security vulnerability","description":"In the Montgomery exponentiation code, a table of precomputed values is\nused. An attacker able to analyze which cache lines were accessed\n(perhaps via an active attack such as Prime+Probe) could recover\ninformation about the exponent (CVE-2017-14737).\n","status":"published","published":"2017-11-20T21:18:02Z","modified":"2026-04-16T06:22:34.857675058Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:10594-1","title":"Botan-2.18.1-1.3 on GA media","description":"These are all security issues fixed in the Botan-2.18.1-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:20:29.939433Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2017:2855-1","title":"Security update for Botan","description":"This update for Botan fixes the following issues:\n\nThis security issue was fixed:\n\n- CVE-2017-14737: A cryptographic cache-based side channel in the RSA\n  implementation in Botan allowed a local attacker to recover information about\n  RSA secret keys, as demonstrated by CacheD. This occured because an array is\n  indexed with bits derived from a secret key (bsc#1060433).\n","status":"published","published":"2017-10-26T07:52:14Z","modified":"2026-02-04T03:03:32.291719Z","updated_at":"2026-11-02T15:53:44.209561Z"}]}}