CVE-2024-50383

概要

参考情報

• arxiv.org/pdf/2410.13489 · Exploit
• randombit/botan commit 53b0cfd · Patch
• randombit/botan · Product
• news.ycombinator.com/item · Issue Tracking

botan のその他の脆弱性

• CVE-2026-44378高 7.5Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic beha…
• CVE-2026-34582緊急 9.1Botan is a C++ cryptography library. Prior to version 3.11.1, the TLS 1.3 implementation allowed ApplicationData records to be processed pri…
• CVE-2026-34580高 7.5Botan is a C++ cryptography library. In 3.11.0, the function Certificate_Store::certificate_known had a misleading name; it would return tru…
• CVE-2026-32884中 5.9Botan is a C++ cryptography library. Prior to version 3.11.0, during processing of an X.509 certificate path using name constraints which re…
• CVE-2026-32883中 5.9Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked f…