Priority LOW 18
Botan is a C++ cryptography library.
Vulnerabilities
44 records
Priority LOW 10
Botan is a C++ cryptography library.
Priority MEDIUM 42
Botan is a C++ cryptography library.
Priority LOW 25
Botan is a C++ cryptography library.
Priority LOW 21
Botan is a C++ cryptography library.
Priority LOW 26
Botan is a C++ cryptography library.
Priority LOW 33
Botan is a C++ cryptography library.
Priority LOW 36
Botan is a C++ cryptography library.
Priority MEDIUM 43
Botan is a C++ cryptography library.
TI-2026-26828 CVE-2026-34580
Botan has a certificate authentication bypass due to trust anchor confusion
Priority MEDIUM 48
Botan is a C++ cryptography library.
TI-2026-25336 CVE-2026-32877
Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field
Priority MEDIUM 41
Botan is a C++ cryptography library.
TI-2026-25342 CVE-2026-32883
Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass
Priority LOW 26
Botan is a C++ cryptography library.
TI-2026-25343 CVE-2026-32884
Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)
Priority LOW 26
Botan is a C++ cryptography library.
TI-2024-33818 CVE-2024-50383 · GHSA-m6p4-vhgw-8c9c
Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced…
Priority MEDIUM 60
Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519).
TI-2024-33817 CVE-2024-50382 · GHSA-p27h-83pf-6hh9
Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced…
Priority MEDIUM 60
Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM.
Priority LOW 30
Botan is a C++ cryptography library.
Priority LOW 32
Botan is a C++ cryptography library.
TI-2024-23001 CVE-2024-34703
Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters
Priority LOW 39
Botan is a C++ cryptography library.
TI-2017-04936 CVE-2017-7252 · GHSA-qhqh-9m2p-r8vv
bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a…
Priority LOW 39
bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password.
TI-2022-21462 CVE-2022-43705
In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate…
Priority MEDIUM 40
In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error.
TI-2021-17569 CVE-2021-40529 · GHSA-f9qg-252f-g8cg
The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other…
Priority LOW 30
The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of…
TI-2021-06410 CVE-2021-24115 · GHSA-cj2q-f8cp-cqmf
In Botan before 2.17.3, constant-time computations are not used for certain decoding and…
Priority MEDIUM 46
In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex).
TI-2018-14308 CVE-2018-20187 · GHSA-g9j4-hp3j-g668
A side-channel issue was discovered in Botan before 2.9.0.
Priority LOW 30
A side-channel issue was discovered in Botan before 2.9.0.
TI-2018-08927 CVE-2018-12435 · GHSA-xwpq-mm7j-gvv6
Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA…
Priority LOW 27
Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP, related to dsa/dsa.cpp, ec_group/ec_group.cpp, and ecdsa/ecdsa.c…
TI-2018-07022 CVE-2018-9860 · GHSA-3qgv-jw3w-gq48
An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0.
Priority LOW 36
An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0.