CVE-2015-5726

Published: May 13, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (application crash) via an empty BIT STRING in ASN.1 data.

Affected (30)

Products: Botan Project: Botan · Debian: Debian Linux

1 product

1 product

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Botan Project Botan	Version 1.10.0
Botan Project Botan	Version 1.10.1
Botan Project Botan	Version 1.10.2
Botan Project Botan	Version 1.10.3
Botan Project Botan	Version 1.10.4
Botan Project Botan	Version 1.10.5
Botan Project Botan	Version 1.10.6
Botan Project Botan	Version 1.10.7
Botan Project Botan	Version 1.10.8
Botan Project Botan	Version 1.10.9
Botan Project Botan	Version 1.11.0
Botan Project Botan	Version 1.11.10
Botan Project Botan	Version 1.11.11
Botan Project Botan	Version 1.11.12
Botan Project Botan	Version 1.11.13
Botan Project Botan	Version 1.11.14
Botan Project Botan	Version 1.11.15
Botan Project Botan	Version 1.11.16
Botan Project Botan	Version 1.11.17
Botan Project Botan	Version 1.11.18
Botan Project Botan	Version 1.11.1
Botan Project Botan	Version 1.11.2
Botan Project Botan	Version 1.11.3
Botan Project Botan	Version 1.11.4
Botan Project Botan	Version 1.11.5
Botan Project Botan	Version 1.11.6
Botan Project Botan	Version 1.11.7
Botan Project Botan	Version 1.11.8
Botan Project Botan	Version 1.11.9