Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85522
HistoryNov 25, 2022 - 12:00 a.m.

Botan has unspecified vulnerabilities

2022-11-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
botan
cryptographic algorithms
aes
des
sha-1
rsa
dsa
diffie-hellman
certificate validation error
ocsp responses
attacker
exploit

0.001 Low

EPSS

Percentile

39.5%

Botan is a library of cryptographic algorithms written in C. It supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. It supports multiple algorithms such as AES, DES, SHA-1, RSA, DSA and Diffie-Hellman, etc. A security vulnerability exists in Botan versions 1.11.34 and later up to 2.19.3, which stems from a certificate validation error and could be exploited by an attacker to forge OCSP responses.

CPENameOperatorVersion
botan botan >=1.11.34,lt2.19.3