https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:03:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-322263 EUVD-2026-322263 https://cve.radiocsirt.org/vuln/euvd-2026-322263 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44378 <p>Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which prohibits indefinite length encodings. This vulnerability is fixed in 3.12.0.</p> <p>Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which prohibits indefinite length encodings. This vulnerability is fixed in 3.12.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44378 https://cve.radiocsirt.org/vuln/oesa-2026-4213 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: botan2</p> <p>Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \#10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API reference, tutorial, and examples may help impart the flavor of the library. This is the current stable release branch 2.x of Botan. Security Fix(es):</p> <p>Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which prohibits indefinite length encodings. This vulnerability is fixed in 3.12.0.(CVE-2026-44378)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP4: botan2</p> <p>Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \#10 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API reference, tutorial, and examples may help impart the flavor of the library. This is the current stable release branch 2.x of Botan. Security Fix(es):</p> <p>Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which prohibits indefinite length encodings. This vulnerability is fixed in 3.12.0.(CVE-2026-44378)</p> https://cve.radiocsirt.org/vuln/oesa-2026-4213 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11649-1 <p>Botan-3.13.0-1.1 on GA media</p> <p>Botan-3.13.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11649-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44378 <p><strong>Affected:</strong> Ubuntu:25.10: botan3, Ubuntu:26.04:LTS: botan3</p> <p>Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which prohibits indefinite length encodings. This vulnerability is fixed in 3.12.0.</p> <p><strong>Affected:</strong> Ubuntu:25.10: botan3, Ubuntu:26.04:LTS: botan3</p> <p>Botan is a C++ cryptography library. Prior to 3.12.0, certain patterns of indefinite length encodings in BER data could cause quadratic behavior in the parser, resulting in a denial of service. Such BER encodings were accepted even in structures which are required to be encoded as DER, which prohibits indefinite length encodings. This vulnerability is fixed in 3.12.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-44378