Known vulnerabilities in Botan

Vendor: Randombit
Software: Botan
Software CPE: cpe:2.3:a:randombit:botan:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Botan Botan is affected by 30 known vulnerabilities: 5 high, 19 medium, 6 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130440 - Inefficient Algorithmic Complexity
CVE-2026-44378
CWE-407 Medium
No
No
3.12.0 07.05.2026 SB2026050781
SB2026080547
#VU125385 - Improper Certificate Validation
CVE-2026-34580
CWE-295 High
No
No
3.11.1 08.04.2026 SB20260408105
SB2026041809
SB2026041810
and 2 more
#VU125384 - Improper Enforcement of Behavioral Workflow
CVE-2026-34582
CWE-841 Medium
No
No
3.11.1 08.04.2026 SB20260408105
SB2026041809
SB2026041810
and 2 more
#VU125383 - Improper Verification of Cryptographic Signature
CVE-2026-32883
CWE-347 Medium
No
No
3.11.0 08.04.2026 SB20260408104
SB2026041809
SB2026041810
and 2 more
#VU125382 - Improper Certificate Validation
CVE-2026-32884
CWE-295 Medium
No
No
3.11.0 08.04.2026 SB20260408104
SB2026041809
SB2026041810
and 2 more
#VU125381 - Out-of-bounds read
CVE-2026-32877
CWE-125 High
No
No
3.11.0 08.04.2026 SB20260408104
SB2026041809
SB2026041810
and 2 more
#VU99612 - Processor optimization removal or modification of security-critical code
CVE-2024-50382
CWE-1037 Low
No
No
3.6.0 01.11.2024 SB2024110153
SB2024110162
SB2024110163
and 2 more
#VU96994 - Resource exhaustion
CVE-2024-34703
CWE-400 Medium
No
No
2.19.4, 3.3.0 10.09.2024 SB2024091051
SB2024091057
SB2024091058
and 5 more
#VU94671 - Asymmetric Resource Consumption (Amplification)
CVE-2024-34702
CWE-405 Medium
No
No
2.19.5, 3.5.0 23.07.2024 SB2024072329
SB2024091058
SB2024091059
and 4 more
#VU94669 - Improper Certificate Validation
CVE-2024-39312
CWE-295 Medium
No
No
2.19.5, 3.5.0 23.07.2024 SB2024072329
SB2024091058
SB2024091059
and 4 more
#VU125380 - Improper Certificate Validation
CVE-2022-43705
CWE-295 Low
No
No
2.19.3, 3.0.0 16.11.2022 SB2022111680
SB2022112983
#VU66482 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2021-40529
CWE-327 Low
No
No
2.18.2 15.08.2022 SB2021090619
SB2022081544
SB2021122229
and 2 more
#VU33133 - Improper Certificate Validation
CVE-2018-9127
CWE-295 Medium
No
No
2.5.0 03.08.2020 SB2018040210
SB2018071625
#VU33132 - Key Management Errors
CVE-2018-20187
CWE-320 Medium
No
No
2.9.0 08.03.2019 SB2019030817
SB2019010602
SB2019021007
#VU13398 - Exposure of sensitive information to an unauthorized actor
CVE-2018-12435
CWE-200 Low
No
No
2.7.0 18.06.2018 SB2018062007
SB2018071624
SB2018070223
and 1 more
#VU33003 - Off-by-one Error
CVE-2018-9860
CWE-193 Medium
No
No
2.6.0 12.04.2018 SB2018041217
SB2018071626
#VU38195 - Improper input validation
CVE-2017-14737
CWE-20 Low
No
No
- 26.09.2017 SB2017092620
SB2017101224
SB2017081302
and 3 more
#VU6398 - Out-of-bounds read
CVE-2017-2801
CWE-125 Low
No
No
- 03.05.2017 SB2017050302
SB2017081301
SB2017081302
and 3 more
#VU39217 - Key Management Errors
CVE-2016-6879
CWE-320 Medium
No
No
- 10.04.2017 SB2017041012
#VU39767 - Integer overflow
CVE-2016-9132
CWE-190 High
No
No
- 31.01.2017 SB2017013110
SB2016121209
SB2016121210
and 2 more


Showing elements 1 - 20 out of 30