CVE-2016-2196

CRITICAL

Botan 1.11.x - Heap-based Buffer Overflow in P-521 Reduction Function

Title source: llm

Description

Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (memory overwrite and crash) or execute arbitrary code via unspecified vectors.

References (2)

Core 2

Core References

Vendor Advisory mailing-list x_refsource_mlist

http://marc.info/?l=botan-devel&m=145435148602911&w=2

Vendor Advisory x_refsource_confirm

http://botan.randombit.net/security.html

Scores

CVSS v3 9.8

EPSS 0.0534

EPSS Percentile 91.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-119

Status published

Products (27)

botan_project/botan 1.11.0

botan_project/botan 1.11.1

botan_project/botan 1.11.2

botan_project/botan 1.11.3

botan_project/botan 1.11.4

botan_project/botan 1.11.5

botan_project/botan 1.11.6

botan_project/botan 1.11.7

botan_project/botan 1.11.8

botan_project/botan 1.11.9

... and 17 more

Published May 13, 2016

Tracked Since Feb 18, 2026