Processor optimization removal or modification of security-critical code in Botan - CVE-2024-50382

Vulnerability identifier: #VU99612

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-50382

CWE-ID: CWE-1037

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM when certain LLVM versions are used. A local user can execute arbitrary code with elevated privileges.

Botan
Fedora
openEuler
botan2-debuginfo
botan2-doc
python3-botan2
botan2-devel
botan2-debugsource
botan2

Install updates from vendor's website.

Botan - update to 3.6.0
botan2-debuginfo - update to 2.19.3-4
botan2-doc - update to 2.19.3-4
python3-botan2 - update to 2.19.3-4
botan2-devel - update to 2.19.3-4
botan2-debugsource - update to 2.19.3-4
botan2 - update to 2.19.3-4
botan2 - update to 2.19.5-8.el10_1

• https://github.com/randombit/botan/commit/53b0cfde580e86b03d0d27a488b6c134f662e957
• https://github.com/randombit/botan/compare/3.5.0...3.6.0
• https://arxiv.org/pdf/2410.13489
• https://news.ycombinator.com/item?id=41887153

• Privilege escalation in Botan
• openEuler 24.03 LTS update for botan2
• openEuler 22.03 LTS SP3 update for botan2
• openEuler 22.03 LTS SP4 update for botan2
• Fedora EPEL 10.1 update for botan2