In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.
2017-01-30T22:59:00.827
2025-04-20T01:37:25.860
Deferred
CVSSv3.0: 9.8 (CRITICAL)
AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | botan_project | botan | 1.8.0 | Yes |
| Application | botan_project | botan | 1.8.1 | Yes |
| Application | botan_project | botan | 1.8.2 | Yes |
| Application | botan_project | botan | 1.8.3 | Yes |
| Application | botan_project | botan | 1.8.4 | Yes |
| Application | botan_project | botan | 1.8.5 | Yes |
| Application | botan_project | botan | 1.8.6 | Yes |
| Application | botan_project | botan | 1.8.7 | Yes |
| Application | botan_project | botan | 1.8.8 | Yes |
| Application | botan_project | botan | 1.8.9 | Yes |
| Application | botan_project | botan | 1.8.10 | Yes |
| Application | botan_project | botan | 1.8.11 | Yes |
| Application | botan_project | botan | 1.8.12 | Yes |
| Application | botan_project | botan | 1.8.13 | Yes |
| Application | botan_project | botan | 1.8.14 | Yes |
| Application | botan_project | botan | 1.8.15 | Yes |
| Application | botan_project | botan | 1.9.0 | Yes |
| Application | botan_project | botan | 1.9.1 | Yes |
| Application | botan_project | botan | 1.9.2 | Yes |
| Application | botan_project | botan | 1.9.3 | Yes |
| Application | botan_project | botan | 1.9.4 | Yes |
| Application | botan_project | botan | 1.9.5 | Yes |
| Application | botan_project | botan | 1.9.6 | Yes |
| Application | botan_project | botan | 1.9.7 | Yes |
| Application | botan_project | botan | 1.9.8 | Yes |
| Application | botan_project | botan | 1.9.9 | Yes |
| Application | botan_project | botan | 1.9.10 | Yes |
| Application | botan_project | botan | 1.9.11 | Yes |
| Application | botan_project | botan | 1.9.12 | Yes |
| Application | botan_project | botan | 1.9.13 | Yes |
| Application | botan_project | botan | 1.9.14 | Yes |
| Application | botan_project | botan | 1.9.15 | Yes |
| Application | botan_project | botan | 1.9.16 | Yes |
| Application | botan_project | botan | 1.9.17 | Yes |
| Application | botan_project | botan | 1.9.18 | Yes |
| Application | botan_project | botan | 1.10.0 | Yes |
| Application | botan_project | botan | 1.10.1 | Yes |
| Application | botan_project | botan | 1.10.2 | Yes |
| Application | botan_project | botan | 1.10.3 | Yes |
| Application | botan_project | botan | 1.10.4 | Yes |
| Application | botan_project | botan | 1.10.5 | Yes |
| Application | botan_project | botan | 1.10.6 | Yes |
| Application | botan_project | botan | 1.10.7 | Yes |
| Application | botan_project | botan | 1.10.8 | Yes |
| Application | botan_project | botan | 1.10.9 | Yes |
| Application | botan_project | botan | 1.10.10 | Yes |
| Application | botan_project | botan | 1.10.11 | Yes |
| Application | botan_project | botan | 1.10.12 | Yes |
| Application | botan_project | botan | 1.10.13 | Yes |
| Application | botan_project | botan | 1.10.14 | Yes |
| Application | botan_project | botan | 1.10.15 | Yes |
| Application | botan_project | botan | 1.11.0 | Yes |
| Application | botan_project | botan | 1.11.1 | Yes |
| Application | botan_project | botan | 1.11.2 | Yes |
| Application | botan_project | botan | 1.11.3 | Yes |
| Application | botan_project | botan | 1.11.4 | Yes |
| Application | botan_project | botan | 1.11.5 | Yes |
| Application | botan_project | botan | 1.11.6 | Yes |
| Application | botan_project | botan | 1.11.7 | Yes |
| Application | botan_project | botan | 1.11.8 | Yes |
| Application | botan_project | botan | 1.11.9 | Yes |
| Application | botan_project | botan | 1.11.10 | Yes |
| Application | botan_project | botan | 1.11.11 | Yes |
| Application | botan_project | botan | 1.11.12 | Yes |
| Application | botan_project | botan | 1.11.13 | Yes |
| Application | botan_project | botan | 1.11.14 | Yes |
| Application | botan_project | botan | 1.11.15 | Yes |
| Application | botan_project | botan | 1.11.16 | Yes |
| Application | botan_project | botan | 1.11.17 | Yes |
| Application | botan_project | botan | 1.11.18 | Yes |
| Application | botan_project | botan | 1.11.19 | Yes |
| Application | botan_project | botan | 1.11.20 | Yes |
| Application | botan_project | botan | 1.11.21 | Yes |
| Application | botan_project | botan | 1.11.23 | Yes |
| Application | botan_project | botan | 1.11.24 | Yes |
| Application | botan_project | botan | 1.11.25 | Yes |
| Application | botan_project | botan | 1.11.26 | Yes |
| Application | botan_project | botan | 1.11.27 | Yes |
| Application | botan_project | botan | 1.11.28 | Yes |
| Application | botan_project | botan | 1.11.29 | Yes |
| Application | botan_project | botan | 1.11.30 | Yes |
| Application | botan_project | botan | 1.11.31 | Yes |
| Application | botan_project | botan | 1.11.32 | Yes |
| Application | botan_project | botan | 1.11.33 | Yes |