CVE-2016-6879

High

Published: 10/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set in the enum value.

Risk Assessment

This vulnerability may lead to unauthorized access or manipulation of certificates, posing a serious threat to the security of systems using this library.

Recommendation

It is recommended to update the botan library to version 1.11.31 or later to mitigate this vulnerability.

Other vulnerabilities in botan 1.11.x before 1.11.31

CVE-2016-2196Critical
Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service or execute arbitrary code.

Original NVD description (English source)

The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set in the enum value.