PT-2016-5057 · Botan · Botan

Publicado 2016-05-13 · Atualizado 2016-05-16 · CVE-2016-2196

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Botan versions 1.11.x through 1.11.26

Description A heap-based buffer overflow issue exists in the P-521 reduction function, allowing remote attackers to cause a denial of service or potentially execute arbitrary code via unspecified vectors.

Recommendations For Botan versions 1.11.x through 1.11.26, update to version 1.11.27 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-2196

Produtos afetados

Botan

Referências · 7

• http://botan.randombit.net/security.html · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-2196 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-2196 · Nota de Segurança
• https://ubuntu.com/security/CVE-2016-2196 · Aviso do Fabricante
• http://marc.info/?l=botan-devel&m=145435148602911&w=2 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-2196 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-2196 · Nota de Segurança