← Back

CVE-2016-2195

nvd nist
Published: May 13, 2016Modified: May 6, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow.

Affected (29)

1 product
Botan
1 product
Debian Linux
Configuration A
28 vulnerable
Vulnerable SoftwareAffected Versions
Botan Project
Up to 1.10.10
Version 1.11.0
Version 1.11.10
Version 1.11.11
Version 1.11.12
Version 1.11.13
Version 1.11.14
Version 1.11.15
Version 1.11.16
Version 1.11.17
Version 1.11.18
Version 1.11.19
Version 1.11.1
Version 1.11.20
Version 1.11.21
Version 1.11.22
Version 1.11.23
Version 1.11.24
Version 1.11.25
Version 1.11.26
Version 1.11.2
Version 1.11.3
Version 1.11.4
Version 1.11.5
Version 1.11.6
Version 1.11.7
Version 1.11.8
Version 1.11.9
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 8.0

References (8)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.