Lucene search

K
mageiaGentoo FoundationMGASA-2022-0445
HistoryNov 27, 2022 - 11:51 p.m.

Updated botan packages fix security vulnerability

2022-11-2723:51:49
Gentoo Foundation
advisories.mageia.org
14
botan
security vulnerability
certificate validation
ocsp
unix

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

0.001 Low

EPSS

Percentile

39.5%

Fixed validation of embedded certificates was when checking OCSP responses (CVE-2022-43705)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchbotan2< 2.17.3-2.2botan2-2.17.3-2.2.mga8

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

0.001 Low

EPSS

Percentile

39.5%