Lucene search

[email protected]CVE-2016-6879

HistoryApr 10, 2017 - 3:59 p.m.

CVE-2016-6879

2017-04-1015:59:00

CWE-320

[email protected]

web.nvd.nist.gov

botan

x509_certificate

allowed_usage

nvd

cve-2016-6879

key_usage

security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

39.6%

JSON

The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set in the enum value.

Affected configurations

NVD

Node

botan_projectbotanMatch1.11.0

botan_projectbotanMatch1.11.1

botan_projectbotanMatch1.11.2

botan_projectbotanMatch1.11.3

botan_projectbotanMatch1.11.4

botan_projectbotanMatch1.11.5

botan_projectbotanMatch1.11.6

botan_projectbotanMatch1.11.7

botan_projectbotanMatch1.11.8

botan_projectbotanMatch1.11.9

botan_projectbotanMatch1.11.10

botan_projectbotanMatch1.11.11

botan_projectbotanMatch1.11.12

botan_projectbotanMatch1.11.13

botan_projectbotanMatch1.11.14

botan_projectbotanMatch1.11.15

botan_projectbotanMatch1.11.16

botan_projectbotanMatch1.11.17

botan_projectbotanMatch1.11.18

botan_projectbotanMatch1.11.19

botan_projectbotanMatch1.11.20

botan_projectbotanMatch1.11.21

botan_projectbotanMatch1.11.22

botan_projectbotanMatch1.11.23

botan_projectbotanMatch1.11.24

botan_projectbotanMatch1.11.25

botan_projectbotanMatch1.11.26

botan_projectbotanMatch1.11.27

botan_projectbotanMatch1.11.28

botan_projectbotanMatch1.11.29

botan_projectbotanMatch1.11.30

CPENameOperatorVersion
botan_project:botanbotan project botaneq1.11.0
botan_project:botanbotan project botaneq1.11.1
botan_project:botanbotan project botaneq1.11.2
botan_project:botanbotan project botaneq1.11.3
botan_project:botanbotan project botaneq1.11.4
botan_project:botanbotan project botaneq1.11.5
botan_project:botanbotan project botaneq1.11.6
botan_project:botanbotan project botaneq1.11.7
botan_project:botanbotan project botaneq1.11.8
botan_project:botanbotan project botaneq1.11.9

CPE	Name	Operator	Version
botan_project:botan	botan project botan	eq	1.11.0
botan_project:botan	botan project botan	eq	1.11.1
botan_project:botan	botan project botan	eq	1.11.2
botan_project:botan	botan project botan	eq	1.11.3
botan_project:botan	botan project botan	eq	1.11.4
botan_project:botan	botan project botan	eq	1.11.5
botan_project:botan	botan project botan	eq	1.11.6
botan_project:botan	botan project botan	eq	1.11.7
botan_project:botan	botan project botan	eq	1.11.8
botan_project:botan	botan project botan	eq	1.11.9

Rows per page:

1-10 of 311

References

botan.randombit.net/security.html#id2

Social References

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

39.6%

JSON

Related for CVE-2016-6879

debiancve1 prion1 osv1 cvelist1 nvd1 ubuntucve1