EUVD-2016-3278

Malware in sbrugna...

Input validation

The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service infinite loop via unspecified input to the OS2ECP function, related to a composite modulus...

CVE-2016-2194

The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service infinite loop via unspecified input to the OS2ECP function, related to a composite modulus...

CVE-2016-2194

CVE-2016-2194 affects Botan: the ressol function (Tonelli–Shanks) can enter an infinite loop when given a composite modulus, exposed through ECC point decompression (OS2ECP). This enables a remote DoS condition. Several advisories (Debian DSA-3565, Gentoo GLSA-201612-38, Mageia MGASA-2016-0102, F...