CVE-2016-6878

Critical

Published: 10/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Curve25519 code in Botan before version 1.11.31 may allow attackers to have unspecified impact on systems without a native 128-bit integer type, as demonstrated on 32-bit ARM systems compiled by Clang.

Risk Assessment

Organizations may be exposed to unpredictable application behavior, potentially leading to serious security vulnerabilities.

Recommendation

It is recommended to update the Botan library to version 1.11.31 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The Curve25519 code in botan before 1.11.31, on systems without a native 128-bit integer type, might allow attackers to have unspecified impact via vectors related to undefined behavior, as demonstrated on 32-bit ARM systems compiled by Clang.