botan3 vulnerabilities (Debian)
12 vulnerabilities.
-
botan3Debian Botan: scrypt V-buffer heap overflow on 32-bit from constructor-accepted parameters 4.1 Medium -
botan3Debian Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn 2.1 Low -
botan3Debian Botan: Integer overflow when reporting block size in FFI can cause memory corruption 9.2 Critical -
botan3Debian Botan: CLI utility `ocsp_check` accepts unauthenticated responses 5.9 Medium -
botan3Debian Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs 4.8 Medium -
botan3Debian Botan: Online OCSP redirects enable blind requests to internal HTTP services 6.1 Medium -
botan3Debian Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state 7.3 High -
botan3Debian Botan: Quadratic complexity decoding BER indefinite length encodings 6.9 Medium -
botan3Debian Botan has a TLS 1.3 certificate authentication bypass 8.7 High -
botan3Debian Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field 8.2 High -
botan3Debian Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass 5.9 Medium -
botan3Debian Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) 5.9 Medium