Randombit Botan vulnerabilities

• randombit botan Botan: scrypt V-buffer heap overflow on 32-bit from constructor-accepted parameters CVE-2026-104267 Fix available 4.1 MediumNovember 6, 2026
• randombit botan Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn CVE-2026-48057 Fix available 2.1 LowNovember 6, 2026
• randombit botan Botan: Integer overflow when reporting block size in FFI can cause memory corruption CVE-2026-118769 Fix available 9.2 CriticalOctober 29, 2026
• randombit botan Botan: CLI utility `ocsp_check` accepts unauthenticated responses CVE-2026-118768 Fix available 5.9 MediumOctober 29, 2026
• randombit botan Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs CVE-2026-118767 Fix available 4.8 MediumOctober 29, 2026
• randombit botan Botan: Online OCSP redirects enable blind requests to internal HTTP services CVE-2026-118766 Fix available 6.1 MediumOctober 29, 2026
• randombit botan Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state CVE-2026-118765 Fix available 7.3 HighOctober 29, 2026
• botan project botan Botan: Quadratic complexity decoding BER indefinite length encodings CVE-2026-44378 Fix available 6.9 MediumMay 27, 2026
• botan project botan, red hat enterprise linux 10 +1 more Botan has a TLS 1.3 certificate authentication bypass CVE-2026-34582 Fix available 8.7 HighApril 7, 2026
• botan project botan, red hat enterprise linux 10 +1 more Botan has a certificate authentication bypass due to trust anchor confusion CVE-2026-34580 Fix available 9.3 CriticalApril 7, 2026
• botan project botan Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field CVE-2026-32877 Fix available 8.2 HighMarch 30, 2026
• botan project botan Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass CVE-2026-32883 Fix available 5.9 MediumMarch 30, 2026
• botan project botan Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) CVE-2026-32884 Fix available 5.9 MediumMarch 30, 2026
• botan project botan Botan has an Authorization Error due to Name Constraint Decoding Bug CVE-2024-39312 Fix available 5.3 MediumJuly 8, 2024
• randombit botan Botan has a Denial of Service Due to Excessive Name Constraints CVE-2024-34702 Fix available 5.3 MediumJuly 8, 2024
• randombit botan Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters CVE-2024-34703 Fix available 7.5 HighJune 30, 2024
• botan project botan A programming error exists in a way Randombit Botan cryptographic library version 2.0.1... CVE-2017-2801 Fix available 6.5 MediumApril 25, 2017