CVE-2024-50382 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-50382 Interim 1 12 2025-06-06T23:17:32Z current 2024-10-24T23:10:36Z 2025-06-06T23:17:32Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-50382 Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JIB3PGKG47QR6R5PTCZJFDYCEELC6BOJ/ E-Mail link for openSUSE-SU-2024:0343-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UY4RL4FBV22PQSJS56OEWPJTGWTDJO2U/ E-Mail link for openSUSE-SU-2024:14429-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Package Hub 15 SP5 SUSE Package Hub 15 SP6 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed Botan Botan-2.19.5-bp155.2.6.1 Botan-2.19.5-bp156.3.6.1 Botan-3.6.0-1.1 Botan-doc-2.19.5-bp155.2.6.1 Botan-doc-2.19.5-bp156.3.6.1 Botan-doc-3.6.0-1.1 MozillaThunderbird MozillaThunderbird-translations-common MozillaThunderbird-translations-other libbotan-1_10-0 libbotan-2-19-2.19.5-bp155.2.6.1 libbotan-2-19-2.19.5-bp156.3.6.1 libbotan-2-19-32bit-2.19.5-bp155.2.6.1 libbotan-2-19-32bit-2.19.5-bp156.3.6.1 libbotan-2-19-64bit-2.19.5-bp155.2.6.1 libbotan-2-19-64bit-2.19.5-bp156.3.6.1 libbotan-3-6-3.6.0-1.1 libbotan-devel libbotan-devel-2.19.5-bp155.2.6.1 libbotan-devel-2.19.5-bp156.3.6.1 libbotan-devel-3.6.0-1.1 libbotan-devel-32bit-2.19.5-bp155.2.6.1 libbotan-devel-32bit-2.19.5-bp156.3.6.1 libbotan-devel-64bit-2.19.5-bp155.2.6.1 libbotan-devel-64bit-2.19.5-bp156.3.6.1 python3-botan-2.19.5-bp155.2.6.1 python3-botan-2.19.5-bp156.3.6.1 python3-botan-3.6.0-1.1 Botan-2.19.5-bp155.2.6.1 as a component of SUSE Package Hub 15 SP5 Botan-doc-2.19.5-bp155.2.6.1 as a component of SUSE Package Hub 15 SP5 libbotan-2-19-2.19.5-bp155.2.6.1 as a component of SUSE Package Hub 15 SP5 libbotan-2-19-32bit-2.19.5-bp155.2.6.1 as a component of SUSE Package Hub 15 SP5 libbotan-2-19-64bit-2.19.5-bp155.2.6.1 as a component of SUSE Package Hub 15 SP5 libbotan-devel-2.19.5-bp155.2.6.1 as a component of SUSE Package Hub 15 SP5 libbotan-devel-32bit-2.19.5-bp155.2.6.1 as a component of SUSE Package Hub 15 SP5 libbotan-devel-64bit-2.19.5-bp155.2.6.1 as a component of SUSE Package Hub 15 SP5 python3-botan-2.19.5-bp155.2.6.1 as a component of SUSE Package Hub 15 SP5 Botan-2.19.5-bp156.3.6.1 as a component of SUSE Package Hub 15 SP6 Botan-doc-2.19.5-bp156.3.6.1 as a component of SUSE Package Hub 15 SP6 libbotan-2-19-2.19.5-bp156.3.6.1 as a component of SUSE Package Hub 15 SP6 libbotan-2-19-32bit-2.19.5-bp156.3.6.1 as a component of SUSE Package Hub 15 SP6 libbotan-2-19-64bit-2.19.5-bp156.3.6.1 as a component of SUSE Package Hub 15 SP6 libbotan-devel-2.19.5-bp156.3.6.1 as a component of SUSE Package Hub 15 SP6 libbotan-devel-32bit-2.19.5-bp156.3.6.1 as a component of SUSE Package Hub 15 SP6 libbotan-devel-64bit-2.19.5-bp156.3.6.1 as a component of SUSE Package Hub 15 SP6 python3-botan-2.19.5-bp156.3.6.1 as a component of SUSE Package Hub 15 SP6 Botan-2.19.5-bp155.2.6.1 as a component of openSUSE Leap 15.5 Botan-doc-2.19.5-bp155.2.6.1 as a component of openSUSE Leap 15.5 libbotan-2-19-2.19.5-bp155.2.6.1 as a component of openSUSE Leap 15.5 libbotan-2-19-32bit-2.19.5-bp155.2.6.1 as a component of openSUSE Leap 15.5 libbotan-2-19-64bit-2.19.5-bp155.2.6.1 as a component of openSUSE Leap 15.5 libbotan-devel-2.19.5-bp155.2.6.1 as a component of openSUSE Leap 15.5 libbotan-devel-32bit-2.19.5-bp155.2.6.1 as a component of openSUSE Leap 15.5 libbotan-devel-64bit-2.19.5-bp155.2.6.1 as a component of openSUSE Leap 15.5 python3-botan-2.19.5-bp155.2.6.1 as a component of openSUSE Leap 15.5 Botan-2.19.5-bp156.3.6.1 as a component of openSUSE Leap 15.6 Botan-doc-2.19.5-bp156.3.6.1 as a component of openSUSE Leap 15.6 libbotan-2-19-2.19.5-bp156.3.6.1 as a component of openSUSE Leap 15.6 libbotan-2-19-32bit-2.19.5-bp156.3.6.1 as a component of openSUSE Leap 15.6 libbotan-2-19-64bit-2.19.5-bp156.3.6.1 as a component of openSUSE Leap 15.6 libbotan-devel-2.19.5-bp156.3.6.1 as a component of openSUSE Leap 15.6 libbotan-devel-32bit-2.19.5-bp156.3.6.1 as a component of openSUSE Leap 15.6 libbotan-devel-64bit-2.19.5-bp156.3.6.1 as a component of openSUSE Leap 15.6 python3-botan-2.19.5-bp156.3.6.1 as a component of openSUSE Leap 15.6 Botan-3.6.0-1.1 as a component of openSUSE Tumbleweed Botan-doc-3.6.0-1.1 as a component of openSUSE Tumbleweed libbotan-3-6-3.6.0-1.1 as a component of openSUSE Tumbleweed libbotan-devel-3.6.0-1.1 as a component of openSUSE Tumbleweed python3-botan-3.6.0-1.1 as a component of openSUSE Tumbleweed MozillaThunderbird as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 MozillaThunderbird as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 libbotan-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Botan as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Botan as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security libbotan-1_10-0 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libbotan-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 Botan as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 MozillaThunderbird as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Workstation Extension 15 SP5 MozillaThunderbird as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 MozillaThunderbird as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird-translations-common as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird-translations-other as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 MozillaThunderbird as a component of openSUSE Leap 15.5 MozillaThunderbird-translations-common as a component of openSUSE Leap 15.5 MozillaThunderbird-translations-other as a component of openSUSE Leap 15.5 MozillaThunderbird as a component of openSUSE Leap 15.6 MozillaThunderbird-translations-common as a component of openSUSE Leap 15.6 MozillaThunderbird-translations-other as a component of openSUSE Leap 15.6 Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V. CVE-2024-50382 SUSE Package Hub 15 SP5:Botan-2.19.5-bp155.2.6.1 SUSE Package Hub 15 SP5:Botan-doc-2.19.5-bp155.2.6.1 SUSE Package Hub 15 SP5:libbotan-2-19-2.19.5-bp155.2.6.1 SUSE Package Hub 15 SP5:libbotan-2-19-32bit-2.19.5-bp155.2.6.1 SUSE Package Hub 15 SP5:libbotan-2-19-64bit-2.19.5-bp155.2.6.1 SUSE Package Hub 15 SP5:libbotan-devel-2.19.5-bp155.2.6.1 SUSE Package Hub 15 SP5:libbotan-devel-32bit-2.19.5-bp155.2.6.1 SUSE Package Hub 15 SP5:libbotan-devel-64bit-2.19.5-bp155.2.6.1 SUSE Package Hub 15 SP5:python3-botan-2.19.5-bp155.2.6.1 SUSE Package Hub 15 SP6:Botan-2.19.5-bp156.3.6.1 SUSE Package Hub 15 SP6:Botan-doc-2.19.5-bp156.3.6.1 SUSE Package Hub 15 SP6:libbotan-2-19-2.19.5-bp156.3.6.1 SUSE Package Hub 15 SP6:libbotan-2-19-32bit-2.19.5-bp156.3.6.1 SUSE Package Hub 15 SP6:libbotan-2-19-64bit-2.19.5-bp156.3.6.1 SUSE Package Hub 15 SP6:libbotan-devel-2.19.5-bp156.3.6.1 SUSE Package Hub 15 SP6:libbotan-devel-32bit-2.19.5-bp156.3.6.1 SUSE Package Hub 15 SP6:libbotan-devel-64bit-2.19.5-bp156.3.6.1 SUSE Package Hub 15 SP6:python3-botan-2.19.5-bp156.3.6.1 openSUSE Leap 15.5:Botan-2.19.5-bp155.2.6.1 openSUSE Leap 15.5:Botan-doc-2.19.5-bp155.2.6.1 openSUSE Leap 15.5:libbotan-2-19-2.19.5-bp155.2.6.1 openSUSE Leap 15.5:libbotan-2-19-32bit-2.19.5-bp155.2.6.1 openSUSE Leap 15.5:libbotan-2-19-64bit-2.19.5-bp155.2.6.1 openSUSE Leap 15.5:libbotan-devel-2.19.5-bp155.2.6.1 openSUSE Leap 15.5:libbotan-devel-32bit-2.19.5-bp155.2.6.1 openSUSE Leap 15.5:libbotan-devel-64bit-2.19.5-bp155.2.6.1 openSUSE Leap 15.5:python3-botan-2.19.5-bp155.2.6.1 openSUSE Leap 15.6:Botan-2.19.5-bp156.3.6.1 openSUSE Leap 15.6:Botan-doc-2.19.5-bp156.3.6.1 openSUSE Leap 15.6:libbotan-2-19-2.19.5-bp156.3.6.1 openSUSE Leap 15.6:libbotan-2-19-32bit-2.19.5-bp156.3.6.1 openSUSE Leap 15.6:libbotan-2-19-64bit-2.19.5-bp156.3.6.1 openSUSE Leap 15.6:libbotan-devel-2.19.5-bp156.3.6.1 openSUSE Leap 15.6:libbotan-devel-32bit-2.19.5-bp156.3.6.1 openSUSE Leap 15.6:libbotan-devel-64bit-2.19.5-bp156.3.6.1 openSUSE Leap 15.6:python3-botan-2.19.5-bp156.3.6.1 openSUSE Tumbleweed:Botan-3.6.0-1.1 openSUSE Tumbleweed:Botan-doc-3.6.0-1.1 openSUSE Tumbleweed:libbotan-3-6-3.6.0-1.1 openSUSE Tumbleweed:libbotan-devel-3.6.0-1.1 openSUSE Tumbleweed:python3-botan-3.6.0-1.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-common SUSE Linux Enterprise Module for Package Hub 15 SP5:MozillaThunderbird-translations-other SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-common SUSE Linux Enterprise Module for Package Hub 15 SP6:MozillaThunderbird-translations-other SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:Botan SUSE Linux Enterprise Server 12 SP5-LTSS:Botan SUSE Linux Enterprise Server 12 SP5-LTSS:libbotan-devel SUSE Linux Enterprise Software Development Kit 12 SP5:Botan SUSE Linux Enterprise Software Development Kit 12 SP5:libbotan-1_10-0 SUSE Linux Enterprise Software Development Kit 12 SP5:libbotan-devel SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-common SUSE Linux Enterprise Workstation Extension 15 SP5:MozillaThunderbird-translations-other SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-common SUSE Linux Enterprise Workstation Extension 15 SP6:MozillaThunderbird-translations-other SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-common SUSE Linux Enterprise Workstation Extension 15 SP7:MozillaThunderbird-translations-other openSUSE Leap 15.5:MozillaThunderbird openSUSE Leap 15.5:MozillaThunderbird-translations-common openSUSE Leap 15.5:MozillaThunderbird-translations-other openSUSE Leap 15.6:MozillaThunderbird openSUSE Leap 15.6:MozillaThunderbird-translations-common openSUSE Leap 15.6:MozillaThunderbird-translations-other moderate 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N