CVE-2016-2195

CRITICAL

Botan < 1.10.11 and 1.11.x < 1.11.27 - Heap-Based Buffer Overflow via Crafted ECC Point

Title source: llm

Description

Integer overflow in the PointGFp constructor in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to overwrite memory and possibly execute arbitrary code via a crafted ECC point, which triggers a heap-based buffer overflow.

References (4)

Core 4

Core References

Vendor Advisory mailing-list x_refsource_mlist

http://marc.info/?l=botan-devel&m=145435148602911&w=2

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2016/dsa-3565

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/201612-38

Vendor Advisory x_refsource_confirm

http://botan.randombit.net/security.html

Scores

CVSS v3 9.8

EPSS 0.0668

EPSS Percentile 93.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (29)

botan_project/botan 1.11.0

botan_project/botan 1.11.1

botan_project/botan 1.11.2

botan_project/botan 1.11.3

botan_project/botan 1.11.4

botan_project/botan 1.11.5

botan_project/botan 1.11.6

botan_project/botan 1.11.7

botan_project/botan 1.11.8

botan_project/botan 1.11.9

... and 19 more

Published May 13, 2016

Tracked Since Feb 18, 2026