id: GO-2023-1709
modules:
    - module: github.com/hashicorp/vault
      versions:
        - fixed: 1.11.9
        - introduced: 1.12.0
          fixed: 1.12.5
        - introduced: 1.13.0
          fixed: 1.13.1
      vulnerable_at: 1.13.0
      packages:
        - package: github.com/hashicorp/vault/shamir
          symbols:
            - div
            - mult
          derived_symbols:
            - Combine
            - Split
summary: Cache-timing attacks in Shamir's secret sharing in github.com/hashicorp/vault
description: |-
    HashiCorp Vault's implementation of Shamir's secret sharing uses precomputed
    table lookups, and is vulnerable to cache-timing attacks.

    An attacker with access to, and the ability to observe a large number of unseal
    operations on the host through a side channel may reduce the search space of a
    brute force effort to recover the Shamir shares.
cves:
    - CVE-2023-25000
ghsas:
    - GHSA-vq4h-9ghm-qmrr
credits:
    - Giuseppe Cocomazzi
references:
    - fix: https://github.com/hashicorp/vault/pull/19495
    - web: https://discuss.hashicorp.com/t/hcsec-2023-10-vault-vulnerable-to-cache-timing-attacks-during-seal-and-unseal-operations/52078