Lucene search
HistoryNov 27, 2022 - 4:15 a.m.
CVE-2022-43705
botan
certificate
ocsp
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
39.4%
In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016).
Affected configurations
Node
botan_projectbotanRange1.11.34–2.19.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| botan_project | botan | * | cpe:2.3:a:botan_project:botan:*:*:*:*:*:*:*:* |
Related
nessus
nessus
openSUSE 15 Security Update : Botan (openSUSE-SU-2022:10211-1)
2022-11-24 00:00:00
openSUSE 15 Security Update : Botan (openSUSE-SU-2022:10210-1)
2022-11-24 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2022-0445)
2022-11-28 00:00:00
cve
cve
CVE-2022-43705
2022-11-27 04:15:10
cnvd
cnvd
Botan has unspecified vulnerabilities
2022-11-25 00:00:00
veracode
veracode
Improper Certificate Validation
2022-11-23 23:43:16
mageia
mageia
Updated botan packages fix security vulnerability
2022-11-27 23:51:49
cvelist
cvelist
CVE-2022-43705
2022-11-27 00:00:00
debiancve
debiancve
CVE-2022-43705
2022-11-27 04:15:10
prion
prion
Design/Logic Flaw
2022-11-27 04:15:00
alpinelinux
alpinelinux
CVE-2022-43705
2022-11-27 04:15:10
redos
redos
ROS-20240527-01
2024-05-27 00:00:00
ubuntucve
ubuntucve
CVE-2022-43705
2022-11-27 00:00:00
osv
osv
CVE-2022-43705
2022-11-27 04:15:10
gitlab
gitlab
Improper Certificate Validation
2022-11-27 00:00:00
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0.001
Percentile
39.4%
Related for NVD:CVE-2022-43705