Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. Prior to versions 3.3.0 and 2.19.4, an attacker could present an ECDSA X.509 certificate using explicit encoding where the parameters are very large. The proof of concept used a 16Kbit prime for this purpose. When parsing, the parameter is checked to be prime, causing excessive computation. This was patched in 2.19.4 and 3.3.0 to allow the prime parameter of the elliptic curve to be at most 521 bits. No known workarounds are available. Note that support for explicit encoding of elliptic curve parameters is deprecated in Botan.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7f42bafbdb advisory.

    Rebase to v2.19.5

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6d84a608f1 advisory.

    Rebase to v2.19.5

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0201-1 advisory.

    Update to 2.19.5:

    * Fix multiple Denial of service attacks due to X.509 cert processing:
    * CVE-2024-34702 - boo#1227238
    * CVE-2024-34703 - boo#1227607
    * CVE-2024-39312 - boo#1227608
    * Fix a crash in OCB
    * Fix a test failure in compression with certain versions of zlib
    * Fix some iterator debugging errors in TLS CBC decryption.
    * Avoid a miscompilation in ARIA when using XCode 14

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2415-1 advisory.

    Security fixes:

    - CVE-2024-34703: Fixed denial of service due to overly large elliptic curve parameters in Botan     (bsc#1227239)

    Other fixes:

    - Mozilla Thunderbird 115.12.1
      * 115.12.0 got pulled because of upstream automation process errors         and Windows installer signing changes.
        No code changes, changelog is the same as 115.12.0 (bsc#1226495)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
202732	Fedora 40 : botan2 (2024-7f42bafbdb)	Nessus	Fedora Local Security Checks	medium
202731	Fedora 39 : botan2 (2024-6d84a608f1)	Nessus	Fedora Local Security Checks	medium
202559	openSUSE 15 Security Update : Botan (openSUSE-SU-2024:0201-1)	Nessus	SuSE Local Security Checks	medium
202333	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : MozillaThunderbird (SUSE-SU-2024:2415-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-34703

high

Tenable Plugins

medium

medium

medium

high