PT-2016-5238

Name of the Vulnerable Software and Affected Versions Botan versions prior to 1.10.13 Botan versions 1.11.x prior to 1.11.29 Description The issue is related to the modular inverse operation on the signature nonce k in the ECDSA algorithm. It does not use a constant-time algorithm, which might...

PT-2016-3837

Name of the Vulnerable Software and Affected Versions Botan versions prior to 1.10.13 Botan versions 1.11.x prior to 1.11.22 Description The issue makes it easier for remote attackers to conduct million-message attacks by measuring time differences, related to the decoding of PKCS1 padding...

botan -- multiple vulnerabilities

Jack Lloyd reports: Botan 1.10.13 has been released backporting some side channel protections for ECDSA signatures CVE-2016-2849 and PKCS 1 RSA decryption CVE-2015-7827...

FreeBSD : Botan BER Decoder vulnerabilities (2004616d-f66c-11e5-b94c-001999f8d30b)

The botan developers reports : Excess memory allocation in BER decoder - The BER decoder would allocate a fairly arbitrary amount of memory in a length field, even if there was no chance the read request would succeed. This might cause the process to run out of memory or invoke the OOM killer...

FreeBSD : Multiple vulnerabilities in Botan (4cd9b19f-f66d-11e5-b94c-001999f8d30b)

The botan developers reports : Infinite loop in modular square root algorithm - The ressol function implements the Tonelli-Shanks algorithm for finding square roots could be sent into a nearly infinite loop due to a misplaced conditional check. This could occur if a composite modulus is provided,...

botan: multiple issues

CVE-2016-2849 ECDSA side channel: ECDSA and DSA signature algorithms perform a modular inverse on the signature nonce k. The modular inverse algorithm used had input dependent loops, and it is possible a side channel attack could recover sufficient information about the nonce to eventually...

Mageia: Security Advisory (MGASA-2016-0102)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated botan packages fix security vulnerability

The BER decoder would crash due to reading from offset 0 of an empty vector if it encountered a BIT STRING which did not contain any data at all. This can be used to easily crash applicatons reading untrusted ASN.1 data, but does not seem exploitable for code execution CVE-2015-5726. The BER...

PT-2016-5055

Name of the Vulnerable Software and Affected Versions Botan versions prior to 1.10.11 Botan versions 1.11.x prior to 1.11.27 Description The issue allows remote attackers to cause a denial of service, specifically an infinite loop, via unspecified input to the OS2ECP function. This is related to ...

PT-2016-3699

Name of the Vulnerable Software and Affected Versions Botan versions 1.10.x through 1.10.9 Botan versions 1.11.x through 1.11.18 Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, via unspecified vectors. This is related to a length field ...

PT-2016-5056

Name of the Vulnerable Software and Affected Versions Botan versions prior to 1.10.11 Botan versions 1.11.x prior to 1.11.27 Description The issue is caused by an integer overflow in the PointGFp constructor, which allows remote attackers to overwrite memory and possibly execute arbitrary code vi...

PT-2016-3698

Name of the Vulnerable Software and Affected Versions Botan versions 0.10.x through 1.10.9 Botan versions 1.11.x through 1.11.18 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by sending an empty BIT STRING in...

Fedora 22 : botan-1.10.12-1.fc22 / code-editor-2.8.1-13.fc22 / monotone-1.1-13.fc22 / etc (2016-1c08d77b96)

Security fix for CVE-2016-2194, CVE-2016-2195, CVE-2016-2196 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Fedora Update for botan FEDORA-2016-1

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 22 Update: botan-1.10.12-1.fc22

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

[SECURITY] Fedora 23 Update: botan-1.10.12-1.fc23

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

botan: multiple issues

CVE-2016-2194 denial of service The ressol function implements the Tonelli-Shanks algorithm for finding square roots could be sent into a nearly infinite loop due to a misplaced conditional check. This could occur if a composite modulus is provided, as this algorithm is only defined for primes...

Multiple vulnerabilities in Botan

The botan developers reports: Infinite loop in modular square root algorithm - The ressol function implements the Tonelli-Shanks algorithm for finding square roots could be sent into a nearly infinite loop due to a misplaced conditional check. This could occur if a composite modulus is provided, ...

PT-2016-3505

Name of the Vulnerable Software and Affected Versions Botan versions prior to 1.10.8 Botan versions 1.11.x prior to 1.11.9 Description The issue concerns the Miller-Rabin primality check, which is used in cryptographic protection mechanisms. It improperly uses a single random base, making it easi...

Botan BER Decoder vulnerabilities

The botan developers reports: Excess memory allocation in BER decoder - The BER decoder would allocate a fairly arbitrary amount of memory in a length field, even if there was no chance the read request would succeed. This might cause the process to run out of memory or invoke the OOM killer. Cra...