randombit botan
15 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-118769 | >= 2.1.0, < 3.13.0 | Botan: Integer overflow when reporting block size in FFI can cause memory corruption | CRITICAL 9.2 | |||
| CVE-2026-118768 | >= 1.11.34, < 3.13.0 | Botan: CLI utility `ocsp_check` accepts unauthenticated responses | MEDIUM 5.9 | |||
| CVE-2026-118767 | >= 1.11.22, < 3.13.0 | Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs | MEDIUM 4.8 | |||
| CVE-2026-118766 | < 3.13.0 | Botan: Online OCSP redirects enable blind requests to internal HTTP services | MEDIUM 6.1 | |||
| CVE-2026-118765 | >= 3.7.0, < 3.13.0 | Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state | HIGH 7.3 | |||
| CVE-2026-44378 | < 3.12.0 | Botan: Quadratic complexity decoding BER indefinite length encodings | MEDIUM 6.9 | 0.3 % | ||
| CVE-2026-34582 | < 3.11.1 | Botan has a TLS 1.3 certificate authentication bypass | HIGH 8.7 | 0.2 % | ||
| CVE-2026-34580 | >= 3.11.0, < 3.11.1 | Botan has a certificate authentication bypass due to trust anchor confusion | CRITICAL 9.3 | 0.5 % | ||
| CVE-2026-32877 | >= 2.3.0, < 3.11.0 | Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field | HIGH 8.2 | 0.3 % | ||
| CVE-2026-32883 | >= 3.0.0, < 3.11.0 | Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-32884 | < 3.11.0 | Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation) | MEDIUM 5.9 | 0.2 % | ||
| CVE-2024-39312 | < 2.19.5 ; >= 3.0.0, < 3.5.0 | Botan has an Authorization Error due to Name Constraint Decoding Bug | MEDIUM 5.3 | 0.3 % | ||
| CVE-2024-34702 | < 2.19.5 ; >= 3.0.0, < 3.5.0 | Botan has a Denial of Service Due to Excessive Name Constraints | MEDIUM 5.3 | 0.8 % | ||
| CVE-2024-34703 | >= 3.0.0-alpha0, < 3.3.0 ; < 2.19.4 | Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters | HIGH 7.5 | 0.5 % | ||
| CVE-2017-2801 | 2.0.1 | A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead | CRITICAL 9.8 | 1.3 % |