In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.

It was discovered that there was an integer overflow vulnerability in botan, a cryptography library. This could occur while parsing untrusted inputs such as X.509 certificates.

For Debian 7 'Wheezy', this problem has been fixed in version 1.10.5-1+deb7u2.

We recommend that you upgrade your botan1.10 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

### Botan 1.10.14 ###

  - NOTE WELL: Botan 1.10.x is supported for security     patches only until 2017-12-31

  - Fix integer overflow during BER decoding, found by Falko     Strenzke. This bug is not thought to be directly     exploitable but upgrading ASAP is advised.
    (CVE-2016-9132)

  - Fix two cases where (in error situations) an exception     would be thrown from a destructor, causing a call to     std::terminate.

  - When RC4 is disabled in the build, also prevent it from     being included in the OpenSSL provider. (GH #638)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
96535	Debian DLA-786-1 : botan1.10 security update	Nessus	Debian Local Security Checks	critical
96110	Fedora 24 : botan (2016-7de64a450f)	Nessus	Fedora Local Security Checks	critical
96109	Fedora 25 : botan (2016-3b59109c48)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2016-9132

critical

Tenable Plugins

critical

critical

critical