← Back

CVE-2016-9132

nvd nist
Published: Jan 30, 2017Modified: May 13, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.

Affected (84)

Products: Botan Project: Botan
1 product
Botan
Configuration A
84 vulnerable
Vulnerable SoftwareAffected Versions
Botan Project
Version 1.10.0
Version 1.10.10
Version 1.10.11
Version 1.10.12
Version 1.10.13
Version 1.10.14
Version 1.10.15
Version 1.10.1
Version 1.10.2
Version 1.10.3
Version 1.10.4
Version 1.10.5
Version 1.10.6
Version 1.10.7
Version 1.10.8
Version 1.10.9
Version 1.11.0
Version 1.11.10
Version 1.11.11
Version 1.11.12
Version 1.11.13
Version 1.11.14
Version 1.11.15
Version 1.11.16
Version 1.11.17
Version 1.11.18
Version 1.11.19
Version 1.11.1
Version 1.11.20
Version 1.11.21
Version 1.11.23
Version 1.11.24
Version 1.11.25
Version 1.11.26
Version 1.11.27
Version 1.11.28
Version 1.11.29
Version 1.11.2
Version 1.11.30
Version 1.11.31
Version 1.11.32
Version 1.11.33
Version 1.11.3
Version 1.11.4
Version 1.11.5
Version 1.11.6
Version 1.11.7
Version 1.11.8
Version 1.11.9
Version 1.8.0
Version 1.8.10
Version 1.8.11
Version 1.8.12
Version 1.8.13
Version 1.8.14
Version 1.8.15
Version 1.8.1
Version 1.8.2
Version 1.8.3
Version 1.8.4
Version 1.8.5
Version 1.8.6
Version 1.8.7
Version 1.8.8
Version 1.8.9
Version 1.9.0
Version 1.9.10
Version 1.9.11
Version 1.9.12
Version 1.9.13
Version 1.9.14
Version 1.9.15
Version 1.9.16
Version 1.9.17
Version 1.9.18
Version 1.9.1
Version 1.9.2
Version 1.9.3
Version 1.9.4
Version 1.9.5
Version 1.9.6
Version 1.9.7
Version 1.9.8
Version 1.9.9

Timeline

No history available yet.