Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2016-2195
HistoryMay 13, 2016 - 2:59 p.m.

CVE-2016-2195

2016-05-1314:59:00
Debian Security Bug Tracker
security-tracker.debian.org
5

0.025 Low

EPSS

Percentile

90.1%

Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow.

OSVersionArchitecturePackageVersionFilename
Debian9allbotan1.10< 1.10.16-1botan1.10_1.10.16-1_all.deb