CVE-2022-43705
In Botan before 2.19.3, it is possible to forge OCSP responses due to ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016).
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| conan::GitLab Advisory Database Community | botan | 2.19.3 |
| debian 10 | botan | kein Fix angegeben |
| debian 11 | botan | kein Fix angegeben |
| debian 12 | botan | 2.19.3+dfsg-1 |
| debian 13 | botan | 2.19.3+dfsg-1 |
| echo | botan | 2.19.3+dfsg-1 |
| rapidfort ubuntu 20.04 | botan | 0:2.19.3+dfsg-1 |
| rapidfort ubuntu 22.04 | botan | 0:2.19.3+dfsg-1 |
| rapidfort ubuntu 24.04 | botan | 0:2.19.3+dfsg-1 |
| ubuntu 18.04-ESM | botan | kein Fix angegeben |
| ubuntu 20.04-ESM | botan | kein Fix angegeben |
| ubuntu 22.04 | botan | kein Fix angegeben |
Referenzen
- https://github.com/randombit/botan/commit/1829ef9d89614da1eacdf511356bdf98a970f5f5%20%282.19.3%29
- https://github.com/randombit/botan/commit/4e35073ff356e37c3adcf1ff3522e9d0d48c765f%20%282.19.3%29
- https://github.com/randombit/botan/commit/5d8d9fbf75c8b814ea609161bee525d520f5cb57%20%282.19.3%29
- https://github.com/randombit/botan/commit/909c62717855402e04dbaf8ffc085f444d547aae%20%282.19.3%29
- https://github.com/randombit/botan/commit/991b0159282781f2d5c06ff42a9ff00ee563e96b%20%282.19.3%29
- https://github.com/randombit/botan/commit/a33689613127f319c0047fb96f092de16e7cb350%20%282.19.3%29
- https://github.com/randombit/botan/commit/c2faa88b0281e5017be72e1c85d0c41f686e1928%20%282.19.3%29
- https://github.com/randombit/botan/commit/fd83d9e262f63fb673e4c13ca37e5b768e41e812%20%282.19.3%29