Description
In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DLA |
DLA-786-1 | botan1.10 security update |
EUVD |
EUVD-2016-9949 | In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure. |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T02:42:10.498Z
Reserved: 2016-10-31T00:00:00.000Z
Link: CVE-2016-9132
No data.
Status : Deferred
Published: 2017-01-30T22:59:00.827
Modified: 2025-04-20T01:37:25.860
Link: CVE-2016-9132
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DLA
EUVD