| Max CVSS | 10.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2016-2194 | 5.0 |
The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (infinite loop) via unspecified input to the OS2ECP function, related to a composite modulus.
|
01-07-2017 - 01:29 | 13-05-2016 - 14:59 | |
| CVE-2016-2849 | 5.0 |
Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-time algorithm to perform a modular inverse on the signature nonce k, which might allow remote attackers to obtain ECDSA secret keys via a timing side-channel attack.
|
01-07-2017 - 01:29 | 13-05-2016 - 14:59 | |
| CVE-2016-2195 | 10.0 |
Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow.
|
01-07-2017 - 01:29 | 13-05-2016 - 14:59 | |
| CVE-2015-7827 | 5.0 |
Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct million-message attacks by measuring time differences, related to decoding of PKCS#1 padding.
|
09-06-2016 - 18:00 | 13-05-2016 - 14:59 | |
| CVE-2015-5726 | 5.0 |
The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (application crash) via an empty BIT STRING in ASN.1 data.
|
16-05-2016 - 14:47 | 13-05-2016 - 14:59 | |
| CVE-2015-5727 | 7.8 |
The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, related to a length field.
|
13-05-2016 - 19:12 | 13-05-2016 - 14:59 |