Vulnerability Details CVE-2017-2801
A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.3%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 7.5
References
- http://talosintelligence.com/vulnerability_reports/TALOS-2017-0294
- http://www.debian.org/security/2017/dsa-3939
- http://www.securityfocus.com/bid/98106
- http://talosintelligence.com/vulnerability_reports/TALOS-2017-0294
- http://www.debian.org/security/2017/dsa-3939
- http://www.securityfocus.com/bid/98106
Products affected by CVE-2017-2801
-
cpe:2.3:a:botan_project:botan:2.0.1