Skip to content
OpenAdvisories

Package · Azure Linux

botan2

16 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.2

    Botan: Integer overflow when reporting block size in FFI can cause memory corruption

    Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function botan_block_cipher_block_size converted a size_t block size to int without a bounds check. In an application that accepts external algorithm parameter strings and uses the …

  • Critical 9.1

    In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was …