CVE-2016-2196

Removed by vendor...

PT-2016-5057

Name of the Vulnerable Software and Affected Versions Botan versions 1.11.x through 1.11.26 Description A heap-based buffer overflow issue exists in the P-521 reduction function, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via unspecified vectors...

CVE-2016-2850: Improper Input Validation

Botan 1.11.x before 1.11.29 does not enforce TLS policy for 1 signature algorithms and 2 ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors...

CVE-2015-5727: Undefined Security Weakness

The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service memory consumption via unspecified vectors, related to a length field...

CVE-2016-2196: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service memory overwrite and crash or execute arbitrary code via unspecified vectors...

CVE-2015-7827: Exposure of Sensitive Information to an Unauthorized Actor

Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct million-message attacks by measuring time differences, related to decoding of PKCS1 padding...

CVE-2015-5726: Improper Input Validation

The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service application crash via an empty BIT STRING in ASN.1 data...

CVE-2016-2849: Exposure of Sensitive Information to an Unauthorized Actor

Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret keys via a timing side-channel attack...

CVE-2016-2194: Improper Input Validation

The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service infinite loop via unspecified input to the OS2ECP function, related to a composite modulus...

CVE-2016-2195: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow...

PT-2016-5239

Name of the Vulnerable Software and Affected Versions Botan versions 1.11.x through 1.11.28 Description The issue allows remote attackers to conduct downgrade attacks via unspecified vectors because it does not enforce TLS policy for signature algorithms and ECC curves. Recommendations For versio...

CVE-2014-9742: Undefined Security Weakness

The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a DH group...

Fedora 24 : botan-1.10.13-1.fc24 (2016-a545f81683)

From the upstream release notes: Botan 1.10.13 has been released backporting some side channel protections for ECDSA signatures CVE-2016-2849 and PKCS 1 RSA decryption CVE-2015-7827. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

[SECURITY] Fedora 24 Update: botan-1.10.13-1.fc24

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

Botan BER Decoder Denial of Service Vulnerability

Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. The Botan BER decoder fails to properly allocate memory for the 'length' field, allowing remote attackers to exploit the vulnerability by submitting a special request to invoke the OOM...

Botan ECDSA Bypass Attack Vulnerability

Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability exists in Botan that allows remote attackers to exploit the vulnerability to perform a bypass attack on ECDSA...

Botan Heap Buffer Overflow Vulnerability

Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. Botan suffers from a heap buffer overflow vulnerability that allows remote attackers to conduct denial-of-service attacks...

Botan RSA Decryption Vulnerability

Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability exists in Botan that allows remote attackers to perform RSA decryption by exploiting the vulnerability to perform a bypass attack...

Botan BER Decoder Security Bypass Vulnerability

Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. A security vulnerability in the Botan BER decoder allows remote attackers to exploit the vulnerability by submitting a special request to read untrusted ASN.1 data...

Botan Denial of Service Vulnerability

Botan is a C++ library of cryptographic algorithms that supports AES, DES, SHA-1, RSA, DSA and Diffie-Hellman. The Botan modular square root algorithm fails to properly condition check, allowing remote attackers to exploit this vulnerability for denial of service attacks...