botan2 vulnerabilities (Azure Linux)
14 vulnerabilities.
-
botan2Azure Linux Botan: Integer overflow when reporting block size in FFI can cause memory corruption 9.2 Critical -
botan2Azure Linux Botan: CLI utility `ocsp_check` accepts unauthenticated responses 5.9 Medium -
botan2Azure Linux Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs 4.8 Medium -
botan2Azure Linux Botan: Online OCSP redirects enable blind requests to internal HTTP services 6.1 Medium -
botan2Azure Linux Botan: Quadratic complexity decoding BER indefinite length encodings 6.9 Medium -
botan2Azure Linux Botan has a TLS 1.3 certificate authentication bypass 8.7 High -
botan2Azure Linux Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) 5.9 Medium -
botan2Azure Linux Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent... 5.9 Medium -
botan2Azure Linux Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent... 5.9 Medium -
botan2Azure Linux Botan has an Authorization Error due to Name Constraint Decoding Bug 5.3 Medium -
botan2Azure Linux Botan has a Denial of Service Due to Excessive Name Constraints 5.3 Medium -
botan2Azure Linux Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters 7.5 High -
botan2Azure Linux CVE-2022-43705 affecting package botan2 2.14.0-2 9.1 Critical -
botan2Azure Linux In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding... 9.8 Critical