Botan vulnerabilities (openSUSE)
27 vulnerabilities.
-
BotanopenSUSE Botan: Quadratic complexity decoding BER indefinite length encodings 6.9 Medium -
BotanopenSUSE Botan has a TLS 1.3 certificate authentication bypass 8.7 High -
BotanopenSUSE Emissary has GitHub Actions Shell Injection via Workflow Inputs 9.1 Critical -
BotanopenSUSE Emissary has an OS Command Injection via Unvalidated IN_FILE_ENDING / OUT_FILE_ENDING in Executrix 8.8 High -
BotanopenSUSE Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) 5.9 Medium -
BotanopenSUSE Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent... 5.9 Medium -
BotanopenSUSE Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent... 5.9 Medium -
BotanopenSUSE Botan has an Authorization Error due to Name Constraint Decoding Bug 5.3 Medium -
BotanopenSUSE Botan has a Denial of Service Due to Excessive Name Constraints 5.3 Medium -
BotanopenSUSE Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters 7.5 High -
BotanopenSUSE libbotan-1_10-1-1.10.13-1.1 on GA media No score -
BotanopenSUSE CVE-2022-43705 affecting package botan2 2.14.0-2 9.1 Critical -
BotanopenSUSE The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products,... 5.9 Medium -
BotanopenSUSE In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding... 9.8 Critical -
BotanopenSUSE A side-channel issue was discovered in Botan before 2.9.0. An attacker capable of precisely... 5.9 Medium -
BotanopenSUSE Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA... 5.9 Medium -
BotanopenSUSE An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when... 7.5 High -
BotanopenSUSE Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept... 9.8 Critical -
BotanopenSUSE A cryptographic cache-based side channel in the RSA implementation in Botan before 1.10.17, and 1... 5.5 Medium -
BotanopenSUSE A programming error exists in a way Randombit Botan cryptographic library version 2.0.1... 6.5 Medium -
BotanopenSUSE In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which... 9.8 Critical -
BotanopenSUSE Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a... 7.5 High -
BotanopenSUSE Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct... 7.5 High -
BotanopenSUSE Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27... 9.8 Critical -
BotanopenSUSE The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to... 7.5 High -
BotanopenSUSE The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers... 7.5 High -
BotanopenSUSE The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers... 7.5 High