CVE-2016-8871: In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding options had a detectable timing chann...

Security readout for executives and security teams

Botan versions 1.11.29 through 1.11.32 had a timing leak in RSA decryption for certain padding modes. With enough repeated interactions, an attacker might infer plaintext that should remain confidential. Business urgency depends on whether affected Botan versions are present in systems performing RSA decryption. Exposure is most likely in applications or services using Botan 1.11.29 through 1.11.32 for RSA decryption with affected padding options. Systems not using Botan, not using these versions, or not performing RSA decryption are less likely exposed. Treat this as a targeted cryptography exposure review, not a broad emergency. Prioritize systems that use affected Botan versions for externally reachable RSA decryption, because the reported impact is plaintext recovery under sufficient-query conditions. Mitigation focus: Inventory applications and dependencies for Botan 1.11.29 through 1.11.32.; Check Botan security guidance for the fixed or supported upgrade path.; Prioritize internet-facing or multi-tenant services performing RSA decryption..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.