Advisories · Technology
randombit botan.
Every CVE that names randombit botan among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
Botan: Integer overflow when reporting block size in FFI can cause memory corruption
- randombit botan
- Memory corruption
- CWE-681
- CVSS 5.9 Medium
Botan: CLI utility `ocsp_check` accepts unauthenticated responses
- randombit botan
- Weak cryptography or TLS
- CVSS 4.8 Medium
Botan: Python binding bcrypt APIs truncate passwords containing embedded NULs
- randombit botan
- CWE-158
- CVSS 6.1 Medium
Botan: Online OCSP redirects enable blind requests to internal HTTP services
- randombit botan
- Server-side request forgery (SSRF)
- CVSS 7.3 High
Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state
- randombit botan
- CWE-335
- CVSS 6.9 Medium
Botan: Quadratic complexity decoding BER indefinite length encodings
- randombit botan
- Denial of service
- CVSS 8.7 High
Botan has a TLS 1.3 certificate authentication bypass
- randombit botan
- CWE-166
- CWE-841
- CVSS 9.3 CriticalCritical · CVSS 9+
Botan has a certificate authentication bypass due to trust anchor confusion
- randombit botan
- Weak cryptography or TLS
- CVSS 8.2 High
Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field
- randombit botan
- Memory corruption
- CVSS 5.9 Medium
Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass
- randombit botan
- Weak cryptography or TLS
- CVSS 5.9 Medium
Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)
- randombit botan
- Weak cryptography or TLS
- CVSS 5.3 Medium
Botan has an Authorization Error due to Name Constraint Decoding Bug
- randombit botan
- Weak cryptography or TLS
- CVSS 5.3 Medium
Botan has a Denial of Service Due to Excessive Name Constraints
- randombit botan
- CWE-405
- CVSS 7.5 High
Botan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve Parameters
- randombit botan
- Denial of service
- CWE-405
- CVSS 6.5 Medium
Randombit Botan: A programming error exists in a way Randombit Botan cryptographic library version 2.0.1…
- Randombit Botan