PT-2017-9043 · Botan · Botan

Daniel Neus · Publicado 2017-04-10 · Atualizado 2017-04-15 · CVE-2016-6879

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions botan versions 1.11.x through 1.11.30

Description The issue in the X509 Certificate::allowed usage function might allow attackers to have an unspecified impact by leveraging a call with more than one Key Usage set in the enum value.

Recommendations For botan versions 1.11.x through 1.11.30, update to version 1.11.31 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-320

Identificadores relacionados

CVE-2016-6879

Produtos afetados

Botan

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-6879 · Nota de Segurança
• https://botan.randombit.net/security.html#id2 · Nota
• https://osv.dev/vulnerability/CVE-2016-6879 · Aviso do Fabricante