botan 1.11.x prior to 1.11.22 improperly handles wildcard matching against hostnames, which might allow remote malicious users to have unspecified impact via a valid X.509 certificate, as demonstrated by accepting *.example.com as a match for bar.foo.example.com.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
botan project botan |
Vulmon