Skip to content
OpenAdvisories

Package · Debian

botan

21 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.1

    Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn

    Botan is a C++ cryptography library. Prior to 3.13.0, Botan's X.509 Distinguished Name decoder flattens the Attribute-Value Assertions in each Relative Distinguished Name and loses multi-value RDN grouping before DN name-constraint enforcement. An attacker co…