| Package | Affected versions | Patched versions |
|---|---|---|
| botan | = 1.11.29= 1.11.30= 1.11.31= 1.11.32 |
In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing channel which could given sufficient queries be used to recover plaintext, aka an "OAEP side channel" attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free