botan vulnerabilities (Debian)
19 vulnerabilities.
-
botanDebian Botan: Integer overflow when reporting block size in FFI can cause memory corruption 9.2 Critical -
botanDebian Botan: CLI utility `ocsp_check` accepts unauthenticated responses 5.9 Medium -
botanDebian Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs 4.8 Medium -
botanDebian Botan: Online OCSP redirects enable blind requests to internal HTTP services 6.1 Medium -
botanDebian Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state 7.3 High -
botanDebian Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field 8.2 High -
botanDebian Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) 5.9 Medium -
botanDebian Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent... 5.9 Medium -
botanDebian Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent... 5.9 Medium -
botanDebian Botan has an Authorization Error due to Name Constraint Decoding Bug 5.3 Medium -
botanDebian Botan has a Denial of Service Due to Excessive Name Constraints 5.3 Medium -
botanDebian Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters 7.5 High -
botanDebian CVE-2022-43705 affecting package botan2 2.14.0-2 9.1 Critical -
botanDebian The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,... 5.9 Medium -
botanDebian In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding... 9.8 Critical -
botanDebian A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely... 5.9 Medium -
botanDebian Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA... 5.9 Medium -
botanDebian An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when... 7.5 High -
botanDebian Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept... 9.8 Critical