CVE Vulnerabilities

CVE-2015-5727

Published: May 13, 2016 | Modified: May 13, 2016
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
7.8 HIGH
AV:N/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, related to a length field.

Affected Software

Name Vendor Start Version End Version
Botan Botan_project 1.10.0 (including) 1.10.0 (including)
Botan Botan_project 1.10.1 (including) 1.10.1 (including)
Botan Botan_project 1.10.2 (including) 1.10.2 (including)
Botan Botan_project 1.10.3 (including) 1.10.3 (including)
Botan Botan_project 1.10.4 (including) 1.10.4 (including)
Botan Botan_project 1.10.5 (including) 1.10.5 (including)
Botan Botan_project 1.10.6 (including) 1.10.6 (including)
Botan Botan_project 1.10.7 (including) 1.10.7 (including)
Botan Botan_project 1.10.8 (including) 1.10.8 (including)
Botan Botan_project 1.10.9 (including) 1.10.9 (including)
Botan Botan_project 1.11.0 (including) 1.11.0 (including)
Botan Botan_project 1.11.1 (including) 1.11.1 (including)
Botan Botan_project 1.11.2 (including) 1.11.2 (including)
Botan Botan_project 1.11.3 (including) 1.11.3 (including)
Botan Botan_project 1.11.4 (including) 1.11.4 (including)
Botan Botan_project 1.11.5 (including) 1.11.5 (including)
Botan Botan_project 1.11.6 (including) 1.11.6 (including)
Botan Botan_project 1.11.7 (including) 1.11.7 (including)
Botan Botan_project 1.11.8 (including) 1.11.8 (including)
Botan Botan_project 1.11.9 (including) 1.11.9 (including)
Botan Botan_project 1.11.10 (including) 1.11.10 (including)
Botan Botan_project 1.11.11 (including) 1.11.11 (including)
Botan Botan_project 1.11.12 (including) 1.11.12 (including)
Botan Botan_project 1.11.13 (including) 1.11.13 (including)
Botan Botan_project 1.11.14 (including) 1.11.14 (including)
Botan Botan_project 1.11.15 (including) 1.11.15 (including)
Botan Botan_project 1.11.16 (including) 1.11.16 (including)
Botan Botan_project 1.11.17 (including) 1.11.17 (including)
Botan Botan_project 1.11.18 (including) 1.11.18 (including)
Botan1.10 Ubuntu precise *
Botan1.10 Ubuntu trusty *
Botan1.10 Ubuntu upstream *

References