In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur…
Priority MEDIUM 47CWE-190Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-190 and the CVSS impact.
Summary
In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.
Why it matters now
EPSS 0.02951 87th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 84
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:botan_project:botan:1.8.0:*:*:*:*:*:*:* | 1.8.0 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.1:*:*:*:*:*:*:* | 1.8.1 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.2:*:*:*:*:*:*:* | 1.8.2 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.3:*:*:*:*:*:*:* | 1.8.3 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.4:*:*:*:*:*:*:* | 1.8.4 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.5:*:*:*:*:*:*:* | 1.8.5 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.6:*:*:*:*:*:*:* | 1.8.6 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.7:*:*:*:*:*:*:* | 1.8.7 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.8:*:*:*:*:*:*:* | 1.8.8 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.9:*:*:*:*:*:*:* | 1.8.9 | Vulnerable | randombit |
- cpe:2.3:a:botan_project:botan:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.5:*:*:*:*:*:*:* Versions 1.8.5 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.6:*:*:*:*:*:*:* Versions 1.8.6 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.7:*:*:*:*:*:*:* Versions 1.8.7 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.8:*:*:*:*:*:*:* Versions 1.8.8 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.9:*:*:*:*:*:*:* Versions 1.8.9 Vulnerable ·randombit
Show 74 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:botan_project:botan:1.8.10:*:*:*:*:*:*:* | 1.8.10 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.11:*:*:*:*:*:*:* | 1.8.11 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.12:*:*:*:*:*:*:* | 1.8.12 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.13:*:*:*:*:*:*:* | 1.8.13 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.14:*:*:*:*:*:*:* | 1.8.14 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.8.15:*:*:*:*:*:*:* | 1.8.15 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.0:*:*:*:*:*:*:* | 1.9.0 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.1:*:*:*:*:*:*:* | 1.9.1 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.2:*:*:*:*:*:*:* | 1.9.2 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.3:*:*:*:*:*:*:* | 1.9.3 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.4:*:*:*:*:*:*:* | 1.9.4 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.5:*:*:*:*:*:*:* | 1.9.5 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.6:*:*:*:*:*:*:* | 1.9.6 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.7:*:*:*:*:*:*:* | 1.9.7 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.8:*:*:*:*:*:*:* | 1.9.8 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.9:*:*:*:*:*:*:* | 1.9.9 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.10:*:*:*:*:*:*:* | 1.9.10 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.11:*:*:*:*:*:*:* | 1.9.11 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.12:*:*:*:*:*:*:* | 1.9.12 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.13:*:*:*:*:*:*:* | 1.9.13 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.14:*:*:*:*:*:*:* | 1.9.14 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.15:*:*:*:*:*:*:* | 1.9.15 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.16:*:*:*:*:*:*:* | 1.9.16 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.17:*:*:*:*:*:*:* | 1.9.17 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.9.18:*:*:*:*:*:*:* | 1.9.18 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.0:*:*:*:*:*:*:* | 1.10.0 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.1:*:*:*:*:*:*:* | 1.10.1 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.2:*:*:*:*:*:*:* | 1.10.2 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.3:*:*:*:*:*:*:* | 1.10.3 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.4:*:*:*:*:*:*:* | 1.10.4 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.5:*:*:*:*:*:*:* | 1.10.5 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.6:*:*:*:*:*:*:* | 1.10.6 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.7:*:*:*:*:*:*:* | 1.10.7 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.8:*:*:*:*:*:*:* | 1.10.8 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.9:*:*:*:*:*:*:* | 1.10.9 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.10:*:*:*:*:*:*:* | 1.10.10 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.11:*:*:*:*:*:*:* | 1.10.11 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.12:*:*:*:*:*:*:* | 1.10.12 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.13:*:*:*:*:*:*:* | 1.10.13 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.14:*:*:*:*:*:*:* | 1.10.14 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.10.15:*:*:*:*:*:*:* | 1.10.15 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.0:*:*:*:*:*:*:* | 1.11.0 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.1:*:*:*:*:*:*:* | 1.11.1 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.2:*:*:*:*:*:*:* | 1.11.2 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.3:*:*:*:*:*:*:* | 1.11.3 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.4:*:*:*:*:*:*:* | 1.11.4 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.5:*:*:*:*:*:*:* | 1.11.5 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.6:*:*:*:*:*:*:* | 1.11.6 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.7:*:*:*:*:*:*:* | 1.11.7 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.8:*:*:*:*:*:*:* | 1.11.8 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.9:*:*:*:*:*:*:* | 1.11.9 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.10:*:*:*:*:*:*:* | 1.11.10 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.11:*:*:*:*:*:*:* | 1.11.11 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.12:*:*:*:*:*:*:* | 1.11.12 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.13:*:*:*:*:*:*:* | 1.11.13 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.14:*:*:*:*:*:*:* | 1.11.14 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.15:*:*:*:*:*:*:* | 1.11.15 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.16:*:*:*:*:*:*:* | 1.11.16 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.17:*:*:*:*:*:*:* | 1.11.17 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.18:*:*:*:*:*:*:* | 1.11.18 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.19:*:*:*:*:*:*:* | 1.11.19 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.20:*:*:*:*:*:*:* | 1.11.20 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.21:*:*:*:*:*:*:* | 1.11.21 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.23:*:*:*:*:*:*:* | 1.11.23 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.24:*:*:*:*:*:*:* | 1.11.24 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.25:*:*:*:*:*:*:* | 1.11.25 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.26:*:*:*:*:*:*:* | 1.11.26 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.27:*:*:*:*:*:*:* | 1.11.27 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.28:*:*:*:*:*:*:* | 1.11.28 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.29:*:*:*:*:*:*:* | 1.11.29 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.30:*:*:*:*:*:*:* | 1.11.30 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.31:*:*:*:*:*:*:* | 1.11.31 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.32:*:*:*:*:*:*:* | 1.11.32 | Vulnerable | randombit |
| cpe:2.3:a:botan_project:botan:1.11.33:*:*:*:*:*:*:* | 1.11.33 | Vulnerable | randombit |
- cpe:2.3:a:botan_project:botan:1.8.10:*:*:*:*:*:*:* Versions 1.8.10 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.11:*:*:*:*:*:*:* Versions 1.8.11 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.12:*:*:*:*:*:*:* Versions 1.8.12 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.13:*:*:*:*:*:*:* Versions 1.8.13 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.14:*:*:*:*:*:*:* Versions 1.8.14 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.8.15:*:*:*:*:*:*:* Versions 1.8.15 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.1:*:*:*:*:*:*:* Versions 1.9.1 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.2:*:*:*:*:*:*:* Versions 1.9.2 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.3:*:*:*:*:*:*:* Versions 1.9.3 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.4:*:*:*:*:*:*:* Versions 1.9.4 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.5:*:*:*:*:*:*:* Versions 1.9.5 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.6:*:*:*:*:*:*:* Versions 1.9.6 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.7:*:*:*:*:*:*:* Versions 1.9.7 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.8:*:*:*:*:*:*:* Versions 1.9.8 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.9:*:*:*:*:*:*:* Versions 1.9.9 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.10:*:*:*:*:*:*:* Versions 1.9.10 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.11:*:*:*:*:*:*:* Versions 1.9.11 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.12:*:*:*:*:*:*:* Versions 1.9.12 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.13:*:*:*:*:*:*:* Versions 1.9.13 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.14:*:*:*:*:*:*:* Versions 1.9.14 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.15:*:*:*:*:*:*:* Versions 1.9.15 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.16:*:*:*:*:*:*:* Versions 1.9.16 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.17:*:*:*:*:*:*:* Versions 1.9.17 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.9.18:*:*:*:*:*:*:* Versions 1.9.18 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.1:*:*:*:*:*:*:* Versions 1.10.1 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.2:*:*:*:*:*:*:* Versions 1.10.2 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.3:*:*:*:*:*:*:* Versions 1.10.3 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.4:*:*:*:*:*:*:* Versions 1.10.4 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.5:*:*:*:*:*:*:* Versions 1.10.5 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.6:*:*:*:*:*:*:* Versions 1.10.6 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.7:*:*:*:*:*:*:* Versions 1.10.7 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.8:*:*:*:*:*:*:* Versions 1.10.8 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.9:*:*:*:*:*:*:* Versions 1.10.9 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.10:*:*:*:*:*:*:* Versions 1.10.10 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.11:*:*:*:*:*:*:* Versions 1.10.11 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.12:*:*:*:*:*:*:* Versions 1.10.12 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.13:*:*:*:*:*:*:* Versions 1.10.13 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.14:*:*:*:*:*:*:* Versions 1.10.14 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.10.15:*:*:*:*:*:*:* Versions 1.10.15 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.0:*:*:*:*:*:*:* Versions 1.11.0 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.1:*:*:*:*:*:*:* Versions 1.11.1 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.2:*:*:*:*:*:*:* Versions 1.11.2 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.3:*:*:*:*:*:*:* Versions 1.11.3 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.4:*:*:*:*:*:*:* Versions 1.11.4 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.5:*:*:*:*:*:*:* Versions 1.11.5 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.6:*:*:*:*:*:*:* Versions 1.11.6 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.7:*:*:*:*:*:*:* Versions 1.11.7 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.8:*:*:*:*:*:*:* Versions 1.11.8 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.9:*:*:*:*:*:*:* Versions 1.11.9 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.10:*:*:*:*:*:*:* Versions 1.11.10 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.11:*:*:*:*:*:*:* Versions 1.11.11 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.12:*:*:*:*:*:*:* Versions 1.11.12 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.13:*:*:*:*:*:*:* Versions 1.11.13 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.14:*:*:*:*:*:*:* Versions 1.11.14 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.15:*:*:*:*:*:*:* Versions 1.11.15 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.16:*:*:*:*:*:*:* Versions 1.11.16 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.17:*:*:*:*:*:*:* Versions 1.11.17 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.18:*:*:*:*:*:*:* Versions 1.11.18 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.19:*:*:*:*:*:*:* Versions 1.11.19 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.20:*:*:*:*:*:*:* Versions 1.11.20 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.21:*:*:*:*:*:*:* Versions 1.11.21 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.23:*:*:*:*:*:*:* Versions 1.11.23 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.24:*:*:*:*:*:*:* Versions 1.11.24 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.25:*:*:*:*:*:*:* Versions 1.11.25 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.26:*:*:*:*:*:*:* Versions 1.11.26 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.27:*:*:*:*:*:*:* Versions 1.11.27 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.28:*:*:*:*:*:*:* Versions 1.11.28 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.29:*:*:*:*:*:*:* Versions 1.11.29 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.30:*:*:*:*:*:*:* Versions 1.11.30 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.31:*:*:*:*:*:*:* Versions 1.11.31 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.32:*:*:*:*:*:*:* Versions 1.11.32 Vulnerable ·randombit
- cpe:2.3:a:botan_project:botan:1.11.33:*:*:*:*:*:*:* Versions 1.11.33 Vulnerable ·randombit
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2016-9132
- 2026-10-03 Alias added: GHSA-674g-g96j-pr63
References
More randombit Botan vulnerabilities
- TI-2024-33818 Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced… CVSS 3.1MEDIUM 5.9
- TI-2024-33817 Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced… CVSS 3.1MEDIUM 5.9
- TI-2016-02004 Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before… CVSS 3.0CRITICAL 9.8
- TI-2016-02005 Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27… CVSS 3.0CRITICAL 9.8
- TI-2026-26828 Botan has a certificate authentication bypass due to trust anchor confusion CVSS 4.0CRITICAL 9.3
- TI-2021-06410 In Botan before 2.17.3, constant-time computations are not used for certain decoding and… CVSS 3.1CRITICAL 9.8
Sources
- CVE-2016-9132 · CVE Program
- CVE-2016-9132 · NVD
- FIRST EPSS
- GHSA-674g-g96j-pr63 · GitHub Advisory Database · CC BY 4.0
- CVE-2016-9132 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences