Your submission was sent successfully! Close

CVE-2015-7825

Published: 10 April 2017

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a certificate with a loop in the certificate chain.

Notes

AuthorNote
seth-arnold
"Introduced in 1.11.6, fixed in 1.11.22"
Priority

Medium

CVSS 3 base score: 7.5

Status

Package Release Status
botan1.10
Launchpad, Ubuntu, Debian
precise Not vulnerable

trusty Does not exist
(trusty was not-affected)
upstream
Released (1.11.22)
wily Not vulnerable