VULNERABILITY INTELLIGENCE

CVE-2016-2849

CVSS score7.5 HIGH

EPSS probability2.81%

CISA KEVNot currently listed

Published2016-05-13

Last modified2026-06-17

Description

Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret keys via a timing side-channel attack.