Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. Prior to 3.5.0 and 2.19.5, checking name constraints in X.509 certificates is quadratic in the number of names and name constraints. An attacker who presented a certificate chain which contained a very large number of names in the SubjectAlternativeName, signed by a CA certificate which contained a large number of name constraints, could cause a denial of service. The problem has been addressed in Botan 3.5.0 and a partial backport has also been applied and is included in Botan 2.19.5.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00717.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Randombit
  • Botan

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Randombit
  • Botan
Advisories
Source ID Title
EUVD EUVD EUVD-2024-34997 Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. Prior to 3.5.0 and 2.19.5, checking name constraints in X.509 certificates is quadratic in the number of names and name constraints. An attacker who presented a certificate chain which contained a very large number of names in the SubjectAlternativeName, signed by a CA certificate which contained a large number of name constraints, could cause a denial of service. The problem has been addressed in Botan 3.5.0 and a partial backport has also been applied and is included in Botan 2.19.5.
Ubuntu USN Ubuntu USN USN-7586-1 Botan vulnerabilities
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://github.com/randombit/botan/commit/21dccc8fef18c165ba3301d850ac61521f85637e cve-icon cve-icon cve-icon
https://github.com/randombit/botan/commit/39535f13c322f56aa3da2f44b2b6abb8619a82ac cve-icon cve-icon cve-icon
https://github.com/randombit/botan/commit/477822a2d10f02d8ba46c9d8a5132f25843f5cc1 cve-icon cve-icon cve-icon
https://github.com/randombit/botan/commit/7606d70d3a2ac7114476ec2651ca0243c4536fdf cve-icon cve-icon cve-icon
https://github.com/randombit/botan/commit/c3264821b9f6286ee4e6e3e06826f6b7177e6d41 cve-icon cve-icon cve-icon
https://github.com/randombit/botan/commit/ff704b12e6fa351aaedd07bffdc91722e84586b8 cve-icon cve-icon cve-icon
https://github.com/randombit/botan/pull/4034 cve-icon cve-icon cve-icon
https://github.com/randombit/botan/pull/4045 cve-icon cve-icon cve-icon
https://github.com/randombit/botan/pull/4047 cve-icon cve-icon cve-icon
https://github.com/randombit/botan/pull/4052 cve-icon cve-icon cve-icon
https://github.com/randombit/botan/pull/4186 cve-icon cve-icon cve-icon
https://github.com/randombit/botan/pull/4187 cve-icon cve-icon cve-icon
https://github.com/randombit/botan/security/advisories/GHSA-5gg9-hqpr-r58j cve-icon cve-icon cve-icon
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2024-08-02T02:59:22.209Z

Reserved: 2024-05-07T13:53:00.132Z

Link: CVE-2024-34702

cve-icon Vulnrichment

Updated: 2024-08-02T02:59:22.209Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-08T17:15:11.233

Modified: 2024-11-21T09:19:13.673

Link: CVE-2024-34702

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-07-13T11:14:07Z