37 matches found
CVE-2026-44378
Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which...
PT-2026-42855
Name of the Vulnerable Software and Affected Versions Botan versions prior to 3.12.0 Description Certain patterns of indefinite length encodings in Basic Encoding Rules BER data can cause quadratic behavior in the parser, leading to a denial of service. These BER encodings were accepted even in...
CVE-2026-34580
Botan is a C++ cryptography library. In 3.11.0, the function CertificateStore::certificateknown had a misleading name; it would return true if any certificate in the store had a DN and subject key identifier, if set matching that of the argument. It did not check that the cert it found and the ce...
CVE-2026-32883
A flaw was found in Botan. A remote attacker could exploit a vulnerability in the X509 path validation process where the signature of Online Certificate Status Protocol OCSP responses was not verified. This omission allows an attacker to provide forged OCSP responses, potentially leading to the...
UBUNTU-CVE-2026-32884
Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...
CVE-2026-32884
Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which restrict the set of allowable DNS names, if no subject alternative name is defined in the end-entity certificate Botan would check that the CN was allowed by t...
Astra Linux - vulnerability in botan
In Botan versions prior to 3.6.0, when certain GCC versions are used, there is a compiler-induced operation involving a secret-dependent function in donna128 utilized in Chacha-Poly1305 and x25519 within lib/utils/donna128.h. An addition can be skipped if a carry flag is not set. This behavior ha...
EUVD-2016-3280
Malware in sbrugna...
EUVD-2018-21453
Malware in sbrugna...
EUVD-2017-6233
Malware in sbrugna...
EUVD-2016-3279
Malware in sbrugna...
EUVD-2015-5673
Malware in sbrugna...
EUVD-2015-5672
Malware in sbrugna...
EUVD-2018-4406
Malware in sbrugna...
EUVD-2015-7724
Malware in sbrugna...
EUVD-2015-7723
Malware in sbrugna...
EUVD-2015-7725
Malware in sbrugna...
EUVD-2016-3278
Malware in sbrugna...