VulnerableCode Package Details - pkg:deb/debian/botan@2.17.3%2Bdfsg-2

Search for packages

Vulnerability	Summary	Fixed by
VCID-4813-s8rk-xqcz Aliases: CVE-2024-50382	Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V.	2.19.3+dfsg-1+deb12u1 Affected by 0 other vulnerabilities.
VCID-9kx4-w9uw-vybp Aliases: CVE-2024-39312	Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. A bug in the parsing of name constraint extensions in X.509 certificates meant that if the extension included both permitted subtrees and excluded subtrees, only the permitted subtree would be checked. If a certificate included a name which was permitted by the permitted subtree but also excluded by excluded subtree, it would be accepted. Fixed in versions 3.5.0 and 2.19.5.	2.19.3+dfsg-1+deb12u1 Affected by 0 other vulnerabilities.
VCID-9us9-jyfu-hqdg Aliases: CVE-2022-43705 GHSA-4v9w-qvcq-6q7w	In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016).	2.19.3+dfsg-1+deb12u1 Affected by 0 other vulnerabilities.
VCID-sfcs-71wr-wbf4 Aliases: CVE-2024-34702	Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. Prior to 3.5.0 and 2.19.5, checking name constraints in X.509 certificates is quadratic in the number of names and name constraints. An attacker who presented a certificate chain which contained a very large number of names in the SubjectAlternativeName, signed by a CA certificate which contained a large number of name constraints, could cause a denial of service. The problem has been addressed in Botan 3.5.0 and a partial backport has also been applied and is included in Botan 2.19.5.	2.19.3+dfsg-1+deb12u1 Affected by 0 other vulnerabilities.
VCID-vgqy-r4ed-4bcv Aliases: CVE-2024-34703	Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. Prior to versions 3.3.0 and 2.19.4, an attacker could present an ECDSA X.509 certificate using explicit encoding where the parameters are very large. The proof of concept used a 16Kbit prime for this purpose. When parsing, the parameter is checked to be prime, causing excessive computation. This was patched in 2.19.4 and 3.3.0 to allow the prime parameter of the elliptic curve to be at most 521 bits. No known workarounds are available. Note that support for explicit encoding of elliptic curve parameters is deprecated in Botan.	2.19.3+dfsg-1+deb12u1 Affected by 0 other vulnerabilities.
VCID-w192-d7k6-h3a3 Aliases: CVE-2024-50383	Botan before 3.6.0, when certain GCC versions are used, has a compiler-induced secret-dependent operation in lib/utils/donna128.h in donna128 (used in Chacha-Poly1305 and x25519). An addition can be skipped if a carry is not set. This was observed for GCC 11.3.0 with -O2 on MIPS, and GCC on x86-i386. (Only 32-bit processors can be affected.)	2.19.3+dfsg-1+deb12u1 Affected by 0 other vulnerabilities.
VCID-xffg-w6fz-yqfj Aliases: CVE-2021-40529	Use of a Broken or Risky Cryptographic Algorithm The ElGamal implementation in Botan, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP.	2.19.3+dfsg-1+deb12u1 Affected by 0 other vulnerabilities.

Vulnerability

Summary

Fixed by

VCID-4813-s8rk-xqcz
Aliases:
CVE-2024-50382

Botan before 3.6.0, when certain LLVM versions are used, has compiler-induced secret-dependent control flow in lib/utils/ghash/ghash.cpp in GHASH in AES-GCM. There is a branch instead of an XOR with carry. This was observed for Clang in LLVM 15 on RISC-V.