CVE-2015-5726

The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (application crash) via an empty BIT STRING in ASN.1 data.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2016-05-13

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Botan (Botan Project)
• Debian Linux (Debian)

References

• http://botan.randombit.net/security.html
• http://www.debian.org/security/2016/dsa-3565