CVE-2017-2801 A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially cr...
CriticalCVSS 9.8
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| botan project botan | = 2.0.1 | No fix listed |
| randombit botan | = 2.0.1 | No fix listed |
References
- talosintelligence.com exploit mitigation third-party-advisory vdb-entry
- DSA-3939 vendor-advisory
- 98106 third-party-advisory us-government-resource vdb-entry