CVE-2018-12435

Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.cpp. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.

• CWE-200

• https://botan.randombit.net/security.htmlThird Party Advisory
• https://github.com/randombit/botan/commit/48fc8df51d99f9d8ba251219367b3d629cc848e3Patch, Third Party Advisory
• https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/Exploit, Third Party Advisory
• https://botan.randombit.net/security.htmlThird Party Advisory
• https://github.com/randombit/botan/commit/48fc8df51d99f9d8ba251219367b3d629cc848e3Patch, Third Party Advisory
• https://www.nccgroup.trust/us/our-research/technical-advisory-return-of-the-hidden-number-problem/Exploit, Third Party Advisory

Published

Jun 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1243Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, vers…7.5
• CVE-2018-12430Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-12431SeaCMS V6.61 has XSS via the site name parameter on an adm1n…
• CVE-2018-12432JavaMelody through 1.60.0 has XSS via the counter parameter …
• CVE-2018-12433cryptlib through 3.4.4 allows a memory-cache side-channel at…4.9
• CVE-2018-12434LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory…
• CVE-2018-12436wolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a …
• CVE-2018-12437LibTomCrypt through 1.18.1 allows a memory-cache side-channe…4.9
• CVE-2018-12438The Elliptic Curve Cryptography library (aka sunec or libsun…4.9
• CVE-2018-12439MatrixSSL through 3.9.5 Open allows a memory-cache side-chan…
• CVE-2018-1244Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iD…8.8
• CVE-2018-12440BoringSSL through 2018-06-14 allows a memory-cache side-chan…