CVE-2015-7826

Critical

Published: 10/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Botan versions 1.11.x before 1.11.22 improperly handle wildcard matching against hostnames, which might allow remote attackers to have unspecified impact via a valid X.509 certificate.

Risk Assessment

Attackers may exploit this vulnerability to spoof legitimate certificates for subdomains, potentially compromising the security of communications.

Recommendation

It is recommended to update the Botan library to version 1.11.22 or later to mitigate this vulnerability.

Original NVD description (English source)

botan 1.11.x before 1.11.22 improperly handles wildcard matching against hostnames, which might allow remote attackers to have unspecified impact via a valid X.509 certificate, as demonstrated by accepting *.example.com as a match for bar.foo.example.com.