PT-2021-27597 · Botan · Botan

Published

2021-01-13

·

Updated

2021-01-13

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions: Botan (affected versions not specified)
Description: The issue is related to a heap-buffer-overflow read, which occurs in the Botan library. Specifically, the crash happens in the Botan::bigint monty redc function, and it is also related to the Botan::CurveGFp Montgomery::curve mul and Botan::CurveGFp Montgomery::to curve rep functions.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

OSV-2018-41

Affected Products

Botan