{"id":"CVE-2024-50383","aliases":["AZL-51681","AZL-51701","DEBIAN-CVE-2024-50383","EUVD-2024-44836","GHSA-m6p4-vhgw-8c9c","MGASA-2025-0295","ROOT-OS-ALPINE-320-CVE-2024-50383","UBUNTU-CVE-2024-50383","USN-7586-1","openSUSE-SU-2024:0343-1"],"status":"published","title":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent...","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00549,"percentile":0.46437,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203"],"published":"2024-10-23T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:12","package":"botan","fixed_in":["2.19.3+dfsg-1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"botan","fixed_in":["2.19.5+dfsg-3"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"botan2","fixed_in":["2.19.5-1.1.mga9"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"botan","fixed_in":["2.19.5-r00072","2.19.5-r00073","2.19.5-r00075","2.19.5-r00074","2.19.5-r00076"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-botan","fixed_in":["2.19.5-r00072","2.19.5-r00073","2.19.5-r00075","2.19.5-r00074","2.19.5-r00076"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"botan","fixed_in":["2.19.1+dfsg-2ubuntu1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"botan","fixed_in":["2.19.3+dfsg-1ubuntu2+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"botan2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.14.0-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"botan2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.14.0-2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.3+dfsg-1+deb12u1"}]}],"versions":["2.19.3+dfsg-1"]},{"source":"osv","ecosystem":"Debian:13","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5+dfsg-3"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"botan2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-1.1.mga9"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r00072"},{"fixed":"2.19.5-r00073"},{"fixed":"2.19.5-r00075"},{"fixed":"2.19.5-r00074"},{"fixed":"2.19.5-r00076"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-r00072"},{"fixed":"2.19.5-r00073"},{"fixed":"2.19.5-r00075"},{"fixed":"2.19.5-r00074"},{"fixed":"2.19.5-r00076"}]}]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.0-3","2.4.0-4","2.4.0-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.9.0-2","2.9.0-2build1","2.12.1-2","2.12.1-2build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"oscar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.0-testing-3-1","1.1.0-testing-3-2","1.1.0-testing-3-3","1.1.0-testing-3-3build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"oscar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.0-1","1.3.0-1","1.3.1-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1+dfsg-2ubuntu1+esm1"}]}],"versions":["2.17.3+dfsg-3","2.19.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"oscar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.0-1","1.5.1-1","1.5.1-1build1","1.5.1-1build2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.3+dfsg-1ubuntu2+esm1"}]}],"versions":["2.19.3+dfsg-1ubuntu1","2.19.3+dfsg-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"oscar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.3-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"oscar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.3-2build1","1.5.3-4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"oscar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.5.3-2","1.5.3-2build1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.1+dfsg-2ubuntu1+esm1"}]}],"versions":["2.17.3+dfsg-3","2.19.1+dfsg-2ubuntu1"],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.3+dfsg-1ubuntu2+esm1"}]}],"versions":["2.19.3+dfsg-1ubuntu1","2.19.3+dfsg-1ubuntu2"],"bundled":5},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"Botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-bp156.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"Botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-bp156.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"Botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-bp156.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"Botan","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.19.5-bp156.3.6.1"}]}],"bundled":2}],"products":[{"vendor":"botan_project","product":"botan"}],"references":[{"url":"https://github.com/randombit/botan/commit/53b0cfde580e86b03d0d27a488b6c134f662e957","tags":["Patch","fix"]},{"url":"https://github.com/randombit/botan/compare/3.5.0...3.6.0","tags":["Product","web","report"]},{"url":"https://arxiv.org/pdf/2410.13489","tags":["Exploit","Technical Description","Third Party Advisory","web","report"]},{"url":"https://news.ycombinator.com/item?id=41887153","tags":["Issue Tracking","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50383","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m6p4-vhgw-8c9c"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50383.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-50383","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0295.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34391","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7586-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-50383","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-50383","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-34702","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-34703","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-39312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-50382","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIB3PGKG47QR6R5PTCZJFDYCEELC6BOJ/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1232296","tags":["report"]},{"url":"https://bugzilla.suse.com/1232297","tags":["report"]},{"url":"https://bugzilla.suse.com/1232300","tags":["report"]},{"url":"https://bugzilla.suse.com/1232301","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-50383","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-50383","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","status":"published","published":"2024-10-23T00:00:00Z","modified":"2024-10-24T19:55:57.96Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:34:22.153872Z"}],"euvd":[{"id":"EUVD-2024-44836","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","status":"published","published":"2024-10-23T00:00:00Z","modified":"2024-10-24T19:55:57Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:05:19.50919Z"}],"ghsa":[{"id":"GHSA-m6p4-vhgw-8c9c","title":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent...","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","status":"published","published":"2024-10-23T18:33:09Z","modified":"2024-10-24T21:32:08Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:58:35.988972Z"}],"nvd":[{"id":"CVE-2024-50383","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","status":"published","published":"2024-10-23T17:15:19.54Z","modified":"2026-06-17T08:04:21.137Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-203"],"updated_at":"2026-11-02T14:10:33.928543Z"}],"osv":[{"id":"CVE-2024-50383","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","status":"published","published":"2024-10-23T00:00:00Z","modified":"2026-10-28T10:54:41.029711315Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:44.032344Z"},{"id":"DEBIAN-CVE-2024-50383","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","status":"published","published":"2024-10-23T17:15:19.54Z","modified":"2026-11-02T12:03:06.73056806Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:44.117337Z"},{"id":"UBUNTU-CVE-2024-50383","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","status":"published","published":"2024-10-23T17:15:00Z","modified":"2026-10-17T12:56:39.471343018Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:11.182485Z"},{"id":"AZL-51681","title":"CVE-2024-50383 affecting package botan2 2.14.0-2","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","status":"published","published":"2024-10-23T17:15:19Z","modified":"2026-04-21T04:33:14.060845Z","updated_at":"2026-11-02T15:28:06.3228Z"},{"id":"AZL-51701","title":"CVE-2024-50383 affecting package botan2 2.14.0-2","description":"Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)","status":"published","published":"2024-10-23T17:15:19Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:20.675084Z"},{"id":"MGASA-2025-0295","title":"Updated botan2 packages fix security vulnerability","description":"Botan before 3.6.0, when certain GCC versions are used, has a\ncompiler-induced secret-dependent operation in lib/utils/donna128.h in\ndonna128 (used in Chacha-Poly1305 and x25519). An addition can be\nskipped if a carry is not set. This was observed for GCC 11.3.0 with -O2\non MIPS, and GCC on x86-i386 (only 32-bit processors can be affected).\n(CVE-2024-50383)\n","status":"published","published":"2025-11-15T07:11:33Z","modified":"2026-05-16T06:30:32.661625Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2024:0343-1","title":"Security update for Botan","description":"This update for Botan fixes the following issues:\n\n- Fixed CVE-2024-50382, CVE-2024-50383 - various compiler-induced side channel in GHASH when certain LLVM/GCC versions are used to compile Botan.\n","status":"published","published":"2024-10-30T13:01:43Z","modified":"2026-02-04T03:03:57.662141Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2024-50383","title":"CVE-2024-50383 in botan - Patched by Root","description":"Root has patched CVE-2024-50383 in the botan package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:30:59Z","modified":"2026-09-29T10:16:08.657290379Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"USN-7586-1","title":"botan vulnerabilities","description":"It was discovered that Botan could have compiler dependent operations\ninduced under certain circumstances. An attacker could possibly use this\nissue to cause undefined behavior. (CVE-2024-50382, CVE-2024-50383)\n\nBing Shi discovered that Botan did not limit the size of certain inputs\nwhen checking primality and name constraints. An attacker could possibly\nuse this issue to cause a denial of service. (CVE-2024-34702,\nCVE-2024-34703)\n\nIt was discovered that Botan did not correctly handle conflicting name\nconstraints. An attacker could possibly use this issue to bypass\nauthentication. (CVE-2024-39312)","status":"published","published":"2025-06-23T02:10:22Z","modified":"2026-04-27T18:05:02.082909Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}