637 matches found
Botan 信任管理问题漏洞
Botan is a C++ encryption library developed by Jack Lloyd as an individual project. Versions of Botan prior to 3.11.0 had a trust management vulnerability. This vulnerability stemmed from improper checks of mixed-case common names when processing X.509 certificate paths, which could lead to...
Botan 数据伪造问题漏洞
Botan is a C++ encryption library developed by Jack Lloyd as an individual project. Versions of Botan from 3.0.0 to 3.11.0 had a data manipulation vulnerability, which stemmed from the lack of signature verification for OCSP responses during the X509 path validation process...
PT-2026-29125
Name of the Vulnerable Software and Affected Versions Botan versions 3.0.0 through 3.10.9 Description Botan is a C++ cryptography library. During X509 path validation, versions prior to 3.11.0 did not verify the signature of Online Certificate Status Protocol OCSP responses, only checking for an...
PT-2026-29124
Name of the Vulnerable Software and Affected Versions Botan versions 2.3.0 through 3.10.9 Description Botan is a C++ cryptography library. During SM2 decryption, the code that checks the authentication code value C3 does not verify the encoded value's length before comparison. This can lead to a...
Botan 缓冲区错误漏洞
Botan is a C++ encryption library developed by Jack Lloyd as an individual project. Versions of Botan from 2.3.0 to 3.11.0 contained a buffer error vulnerability. This vulnerability stemmed from the failure to check the expected length of the authentication code value during the SM2 decryption...
ROOT-OS-ALPINE-320-CVE-2024-50383 CVE-2024-50383 in rootio-botan - Patched by Root
Root has patched CVE-2024-50383 in the rootio-botan package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-320-CVE-2024-50382 CVE-2024-50382 in rootio-botan - Patched by Root
Root has patched CVE-2024-50382 in the rootio-botan package for Root:Alpine:3.20. Multiple fixed versions available...
ROOT-OS-ALPINE-319-CVE-2024-50382 CVE-2024-50382 in rootio-botan - Patched by Root
Root has patched CVE-2024-50382 in the rootio-botan package for Root:Alpine:3.19. Multiple fixed versions available...
Fedora 43 : qownnotes (2026-00a6b7589c)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-00a6b7589c advisory. See commit history ---- Automatic update for qownnotes-26.1.7-2.fc43. Changelog for qownnotes Fri Jan 16 2026 Artem Polishchuk - 26.1.7-2 - Mask BR:...
Astra Linux – Vulnerability in Botan
Before version 3.6.0, when certain GCC versions were used, Botan had a compiler-induced operation that relied on secrets in the donna128.h file of lib/utils. This operation was used in Chacha-Poly1305 and x25519. An addition operation could be skipped if a carry wasn’t set. This issue was observe...
Astra Linux – Vulnerability in Botan
Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or by explicitly encoding the parameters. A bug in the parsing of name constraint extensions in X.509 certificates meant that if the extension included both permitted and exclude...
Astra Linux – Vulnerability in Botan
Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or by explicitly encoding the parameters. Before versions 3.5.0 and 2.19.5, checking name constraints in X.509 certificates was quadratic in terms of the number of names and name...
MGASA-2025-0295 Updated botan2 packages fix security vulnerability
Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...
Updated botan2 packages fix security vulnerability
Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 used in Chacha-Poly1305 and x25519. An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i38...
EUVD-2017-6233
Malware in sbrugna...
EUVD-2015-5673
Malware in sbrugna...
EUVD-2018-21453
Malware in sbrugna...
EUVD-2016-3279
Malware in sbrugna...