İçeriğe atla
Noroxi

botan project kayıtları

botan project üreticisine ait 35 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%74,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

35 kayıt
  • CVE-2016-2195
    41Planlayın

    Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory a

    KritikCVSS 9,8İstismar yokEPSS %6

    botan project · botan13 May 2016

  • CVE-2016-2196
    41Planlayın

    Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of servi

    KritikCVSS 9,8İstismar yokEPSS %5

    botan project · botan13 May 2016

  • CVE-2016-9132
    40Planlayın

    In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be co

    KritikCVSS 9,8İstismar yokEPSS %2

    botan project · botan30 Oca 2017

  • CVE-2021-24115
    40Planlayın

    In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and he

    KritikCVSS 9,8İstismar yokEPSS %1

    botan project · botan21 Şub 2021

  • CVE-2017-2801
    39İzleyin

    A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead

    KritikCVSS 9,8İstismar yokEPSS %1

    botan project · botan24 May 2017

  • CVE-2016-6878
    39İzleyin

    The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified imp

    KritikCVSS 9,8İstismar yokEPSS %1

    botan project · botan10 Nis 2017

  • CVE-2015-7826
    39İzleyin

    botan 1.11.x before 1.11.22 improperly handles wildcard matching against hostnames, which might allow remote attackers to have unspecified i

    KritikCVSS 9,8İstismar yokEPSS %1

    botan project · botan10 Nis 2017

  • CVE-2018-9127
    39İzleyin

    Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept certain certificates as valid for hostnames w

    KritikCVSS 9,8İstismar yokEPSS %0

    botan project · botan2 Nis 2018

  • CVE-2026-34580
    37İzleyin

    Botan has a certificate authentication bypass due to trust anchor confusion

    KritikCVSS 9,3İstismar yokEPSS %0

    botan project · botan7 Nis 2026

  • CVE-2022-43705
    36İzleyin

    In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error.

    KritikCVSS 9,1İstismar yokEPSS %0

    botan project · botan27 Kas 2022

  • CVE-2026-34582
    34İzleyin

    Botan has a TLS 1.3 certificate authentication bypass

    YüksekCVSS 8,7İstismar yokEPSS %0

    botan project · botan7 Nis 2026

  • CVE-2026-32877
    32İzleyin

    Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field

    YüksekCVSS 8,2İstismar yokEPSS %0

    botan project · botan30 Mar 2026

  • CVE-2016-2849
    31İzleyin

    Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, w

    YüksekCVSS 7,5İstismar yokEPSS %2

    debian · debian linux13 May 2016

  • CVE-2016-2194
    31İzleyin

    The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (infinite loop) v

    YüksekCVSS 7,5İstismar yokEPSS %2

    debian · debian linux13 May 2016

  • CVE-2015-7827
    31İzleyin

    Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct million-message attacks by measuring time diff

    YüksekCVSS 7,5İstismar yokEPSS %2

    fedoraproject · fedora13 May 2016

  • CVE-2016-2850
    31İzleyin

    Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to co

    YüksekCVSS 7,5İstismar yokEPSS %2

    fedoraproject · fedora13 May 2016

  • CVE-2015-7824
    31İzleyin

    botan 1.11.x before 1.11.22 makes it easier for remote attackers to decrypt TLS ciphertext data via a padding-oracle attack against TLS CBC

    YüksekCVSS 7,5İstismar yokEPSS %1

    botan project · botan10 Nis 2017

  • CVE-2015-5727
    30İzleyin

    The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (memory consum

    YüksekCVSS 7,5İstismar yokEPSS %1

    botan project · botan13 May 2016

  • CVE-2014-9742
    30İzleyin

    The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier

    YüksekCVSS 7,5İstismar yokEPSS %1

    botan project · botan13 May 2016

  • CVE-2018-9860
    30İzleyin

    An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0.

    YüksekCVSS 7,5İstismar yokEPSS %1

    botan project · botan12 Nis 2018

  • CVE-2015-5726
    30İzleyin

    The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (application c

    YüksekCVSS 7,5İstismar yokEPSS %1

    botan project · botan13 May 2016

  • CVE-2015-7825
    30İzleyin

    botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service (infinite loop and m

    YüksekCVSS 7,5İstismar yokEPSS %1

    botan project · botan10 Nis 2017

  • CVE-2016-6879
    30İzleyin

    The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a

    YüksekCVSS 7,5İstismar yokEPSS %0

    botan project · botan10 Nis 2017

  • CVE-2017-7252
    30İzleyin

    bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it

    YüksekCVSS 7,5İstismar yokEPSS %0

    botan project · botan2 Kas 2023

  • CVE-2026-44378
    27İzleyin

    Botan: Quadratic complexity decoding BER indefinite length encodings

    OrtaCVSS 6,9İstismar yokEPSS %0

    botan project · botan27 May 2026