Lucene search

K
mageiaGentoo FoundationMGASA-2022-0445
HistoryNov 27, 2022 - 11:51 p.m.

Updated botan packages fix security vulnerability

2022-11-2723:51:49
Gentoo Foundation
advisories.mageia.org
19
botan
security vulnerability
certificate validation
ocsp
unix

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

39.4%

Fixed validation of embedded certificates was when checking OCSP responses (CVE-2022-43705)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchbotan2< 2.17.3-2.2botan2-2.17.3-2.2.mga8

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

39.4%