PT-2017-9043 · Botan · Botan

Daniel Neus · Published 2017-04-10 · Updated 2017-04-15 · CVE-2016-6879

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions botan versions 1.11.x through 1.11.30

Description The issue in the X509 Certificate::allowed usage function might allow attackers to have an unspecified impact by leveraging a call with more than one Key Usage set in the enum value.

Recommendations For botan versions 1.11.x through 1.11.30, update to version 1.11.31 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-320

Related Identifiers

CVE-2016-6879

Affected Products

Botan

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-6879 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6879 · Vendor Advisory
• https://botan.randombit.net/security.html#id2 · Note