Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Botan 安全漏洞
Vulnerability Description
Botan是Jack Lloyd个人开发者的一个C++加密库。 Botan 3.6.0之前版本存在安全漏洞，该漏洞源于在使用某些版本的LLVM编译时，出现编译器导致的秘密依赖控制流。
CVSS Information
N/A
Vulnerability Type
N/A