high7.5
CVE-2015-5726
The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (application crash) via an empty …
Impact
The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of service (application crash) via an empty BIT STRING in ASN.1 data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Botan Project | Botan | Versions 1.10.0, 1.10.1, 1.10.2, 1.10.3, 1.10.4, 1.10.5 |
| Debian | Debian Linux | Version 8.0 |