CVE-2016-9132 In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and...
CriticalCVSS 9.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| botan project botan | = 1.8.0 | No fix listed |
| botan project botan | = 1.8.1 | No fix listed |
| botan project botan | = 1.8.2 | No fix listed |
| botan project botan | = 1.8.3 | No fix listed |
| botan project botan | = 1.8.4 | No fix listed |
| botan project botan | = 1.8.5 | No fix listed |
| botan project botan | = 1.8.6 | No fix listed |
| botan project botan | = 1.8.7 | No fix listed |
| botan project botan | = 1.8.8 | No fix listed |
| botan project botan | = 1.8.9 | No fix listed |
| botan project botan | = 1.8.10 | No fix listed |
| botan project botan | = 1.8.11 | No fix listed |
| botan project botan | = 1.8.12 | No fix listed |
| botan project botan | = 1.8.13 | No fix listed |
| botan project botan | = 1.8.14 | No fix listed |
| botan project botan | = 1.8.15 | No fix listed |
| botan project botan | = 1.9.0 | No fix listed |
| botan project botan | = 1.9.1 | No fix listed |
| botan project botan | = 1.9.2 | No fix listed |
| botan project botan | = 1.9.3 | No fix listed |
| botan project botan | = 1.9.4 | No fix listed |
| botan project botan | = 1.9.5 | No fix listed |
| botan project botan | = 1.9.6 | No fix listed |
| botan project botan | = 1.9.7 | No fix listed |
| botan project botan | = 1.9.8 | No fix listed |
Show 59 more
| Product | Affected versions | Fixed in |
|---|---|---|
| botan project botan | = 1.9.9 | No fix listed |
| botan project botan | = 1.9.10 | No fix listed |
| botan project botan | = 1.9.11 | No fix listed |
| botan project botan | = 1.9.12 | No fix listed |
| botan project botan | = 1.9.13 | No fix listed |
| botan project botan | = 1.9.14 | No fix listed |
| botan project botan | = 1.9.15 | No fix listed |
| botan project botan | = 1.9.16 | No fix listed |
| botan project botan | = 1.9.17 | No fix listed |
| botan project botan | = 1.9.18 | No fix listed |
| botan project botan | = 1.10.0 | No fix listed |
| botan project botan | = 1.10.1 | No fix listed |
| botan project botan | = 1.10.2 | No fix listed |
| botan project botan | = 1.10.3 | No fix listed |
| botan project botan | = 1.10.4 | No fix listed |
| botan project botan | = 1.10.5 | No fix listed |
| botan project botan | = 1.10.6 | No fix listed |
| botan project botan | = 1.10.7 | No fix listed |
| botan project botan | = 1.10.8 | No fix listed |
| botan project botan | = 1.10.9 | No fix listed |
| botan project botan | = 1.10.10 | No fix listed |
| botan project botan | = 1.10.11 | No fix listed |
| botan project botan | = 1.10.12 | No fix listed |
| botan project botan | = 1.10.13 | No fix listed |
| botan project botan | = 1.10.14 | No fix listed |
| botan project botan | = 1.10.15 | No fix listed |
| botan project botan | = 1.11.0 | No fix listed |
| botan project botan | = 1.11.1 | No fix listed |
| botan project botan | = 1.11.2 | No fix listed |
| botan project botan | = 1.11.3 | No fix listed |
| botan project botan | = 1.11.4 | No fix listed |
| botan project botan | = 1.11.5 | No fix listed |
| botan project botan | = 1.11.6 | No fix listed |
| botan project botan | = 1.11.7 | No fix listed |
| botan project botan | = 1.11.8 | No fix listed |
| botan project botan | = 1.11.9 | No fix listed |
| botan project botan | = 1.11.10 | No fix listed |
| botan project botan | = 1.11.11 | No fix listed |
| botan project botan | = 1.11.12 | No fix listed |
| botan project botan | = 1.11.13 | No fix listed |
| botan project botan | = 1.11.14 | No fix listed |
| botan project botan | = 1.11.15 | No fix listed |
| botan project botan | = 1.11.16 | No fix listed |
| botan project botan | = 1.11.17 | No fix listed |
| botan project botan | = 1.11.18 | No fix listed |
| botan project botan | = 1.11.19 | No fix listed |
| botan project botan | = 1.11.20 | No fix listed |
| botan project botan | = 1.11.21 | No fix listed |
| botan project botan | = 1.11.23 | No fix listed |
| botan project botan | = 1.11.24 | No fix listed |
| botan project botan | = 1.11.25 | No fix listed |
| botan project botan | = 1.11.26 | No fix listed |
| botan project botan | = 1.11.27 | No fix listed |
| botan project botan | = 1.11.28 | No fix listed |
| botan project botan | = 1.11.29 | No fix listed |
| botan project botan | = 1.11.30 | No fix listed |
| botan project botan | = 1.11.31 | No fix listed |
| botan project botan | = 1.11.32 | No fix listed |
| botan project botan | = 1.11.33 | No fix listed |
References
- 95879 third-party-advisory vdb-entry
- github.com patch
- FEDORA-2016-3b59109c48 vendor-advisory
- FEDORA-2016-7de64a450f vendor-advisory