Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x8qg-whhh-m3ph

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.

A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.

EPSS

Процентиль: 52%
0.00295
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 8 лет назад

A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.

CVSS3: 6.5
nvd
больше 8 лет назад

A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.

CVSS3: 6.5
debian
больше 8 лет назад

A programming error exists in a way Randombit Botan cryptographic libr ...

suse-cvrf
больше 8 лет назад

Security update for Botan

EPSS

Процентиль: 52%
0.00295
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-125