Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2016-9132
HistoryJan 30, 2017 - 10:59 p.m.

CVE-2016-9132

2017-01-3022:59:00
Debian Security Bug Tracker
security-tracker.debian.org
15

EPSS

0.007

Percentile

80.1%

In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.

OSVersionArchitecturePackageVersionFilename
Debian9allbotan1.10< 1.10.16-1botan1.10_1.10.16-1_all.deb

EPSS

0.007

Percentile

80.1%