botan vulnerabilities (Ubuntu)
21 vulnerabilities.
-
botanUbuntu Botan: Integer overflow when reporting block size in FFI can cause memory corruption 9.2 Critical -
botanUbuntu Botan: CLI utility `ocsp_check` accepts unauthenticated responses 5.9 Medium -
botanUbuntu Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs 4.8 Medium -
botanUbuntu Botan: Online OCSP redirects enable blind requests to internal HTTP services 6.1 Medium -
botanUbuntu Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state 7.3 High -
botanUbuntu Botan has a TLS 1.3 certificate authentication bypass 8.7 High -
botanUbuntu Botan has a certificate authentication bypass due to trust anchor confusion 9.3 Critical -
botanUbuntu Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field 8.2 High -
botanUbuntu Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass 5.9 Medium -
botanUbuntu Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) 5.9 Medium -
botanUbuntu Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent... 5.9 Medium -
botanUbuntu Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent... 5.9 Medium -
botanUbuntu Botan has an Authorization Error due to Name Constraint Decoding Bug 5.3 Medium -
botanUbuntu Botan has a Denial of Service Due to Excessive Name Constraints 5.3 Medium -
botanUbuntu Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters 7.5 High -
botanUbuntu CVE-2022-43705 affecting package botan2 2.14.0-2 9.1 Critical -
botanUbuntu The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,... 5.9 Medium -
botanUbuntu In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding... 9.8 Critical -
botanUbuntu A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely... 5.9 Medium -
botanUbuntu An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when... 7.5 High -
botanUbuntu Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept... 9.8 Critical