Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

botan project botan 1.10.12 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2016-2849
Botan prior to 1.10.13 and 1.11.x prior to 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote malicious users to obtain ECDSA secret keys via a timing side-channel attack.
Debian Debian Linux 8.0Fedoraproject Fedora 24Botan Project Botan 1.11.22Botan Project Botan 1.11.21Botan Project Botan 1.11.14Botan Project Botan 1.11.13Botan Project Botan 1.11.12Botan Project Botan 1.11.5Botan Project Botan 1.11.4Botan Project Botan 1.11.26Botan Project Botan 1.11.25Botan Project Botan 1.11.18Botan Project Botan 1.11.17Botan Project Botan 1.11.9Botan Project Botan 1.11.8Botan Project Botan 1.11.1Botan Project Botan 1.11.0Botan Project Botan 1.11.28Botan Project Botan 1.11.27Botan Project Botan 1.11.20Botan Project Botan 1.11.19Botan Project Botan 1.11.11
7.5
CVSSv2
CVE-2016-9132
In Botan 1.8.0 up to and including 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memor...
Botan Project Botan 1.10.7Botan Project Botan 1.9.9Botan Project Botan 1.11.18Botan Project Botan 1.9.17Botan Project Botan 1.11.0Botan Project Botan 1.10.9Botan Project Botan 1.11.21Botan Project Botan 1.11.26Botan Project Botan 1.8.4Botan Project Botan 1.11.32Botan Project Botan 1.10.15Botan Project Botan 1.11.19Botan Project Botan 1.9.10Botan Project Botan 1.10.12Botan Project Botan 1.8.0Botan Project Botan 1.9.3Botan Project Botan 1.11.12Botan Project Botan 1.9.4Botan Project Botan 1.10.8Botan Project Botan 1.9.8Botan Project Botan 1.8.13Botan Project Botan 1.9.13
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33228CVE-2024-20361log injectionbypassCVE-2024-4985CVE-2024-35223CVE-2024-29849CVE-2024-31893IMAP
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook