Vulnerability Report: GO-2023-1709
- CVE-2023-25000, GHSA-vq4h-9ghm-qmrr
- Affects: github.com/hashicorp/vault
- Published: Apr 12, 2023
- Modified: Jun 12, 2023
HashiCorp Vault's implementation of Shamir's secret sharing uses precomputed table lookups, and is vulnerable to cache-timing attacks. An attacker with access to, and the ability to observe a large number of unseal operations on the host through a side channel may reduce the search space of a brute force effort to recover the Shamir shares.
Affected Packages
-
PathVersionsSymbols
-
before v1.11.9, from v1.12.0 before v1.12.5, from v1.13.0 before v1.13.1
Aliases
References
- https://github.com/hashicorp/vault/pull/19495
- https://discuss.hashicorp.com/t/hcsec-2023-10-vault-vulnerable-to-cache-timing-attacks-during-seal-and-unseal-operations/52078
- https://vuln.go.dev/ID/GO-2023-1709.json
Credits
- Giuseppe Cocomazzi
Feedback
See anything missing or incorrect?
Suggest an edit to this report.