Skip to content
OpenAdvisories

Package · Ubuntu

botan1.10

17 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field

    Botan is a C++ cryptography library. From version 2.3.0 to before version 3.11.0, during SM2 decryption, the code that checked the authentication code value (C3) failed to check that the encoded value was of the expected length prior to comparison. An invalid…