FLAT-PNKF3 – Vulnerability | Fluid Attacks Database

Database

Description

Crypto++ (aka cryptopp) through 8.9.0 has a Marvin side channel during decryption with PKCS#1 v1.5 padding.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version
debian 11	libcrypto++	=8.4.0-1 \|\| =8.5.0-1 \|\| =8.6.0-1 \|\| =8.6.0-2 \|\| =8.6.0-3 \|\| =8.7.0+git220824-1 \|\| =8.7.0-1 \|\| =8.8.0-1 \|\| =8.8.0-2 \|\| =8.9.0-1 \|\| =8.9.0-1.1 \|\| =8.9.0-1.1~exp1 \|\| =8.9.0-2
debian 12	libcrypto++	=8.7.0+git220824-1 \|\| =8.8.0-1 \|\| =8.8.0-2 \|\| =8.9.0-1 \|\| =8.9.0-1.1 \|\| =8.9.0-1.1~exp1 \|\| =8.9.0-2
debian 13	libcrypto++	=8.9.0-2
debian 14	libcrypto++	=8.9.0-2

Aliases

1. CVE-2023-509792. NVD-2023-509793. OSV-DEBIAN-2023-509794. OSV-2023-509795. SECURITY-TRACKER-CVE-2023-50979

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.