Botan Project Botan 3.0.0 Alpha 0

CPE Details

Botan Project Botan 3.0.0 Alpha 0
botan_project
botan
3.0.0
2025-04-15
15h52 +00:00
2025-04-15
15h52 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:botan_project:botan:3.0.0:alpha0:*:*:*:*:*:*

Informations

Vendor

botan_project

Product

botan

Version

3.0.0

Update

alpha0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-39312 2024-07-08 16h30 +00:00 Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. A bug in the parsing of name constraint extensions in X.509 certificates meant that if the extension included both permitted subtrees and excluded subtrees, only the permitted subtree would be checked. If a certificate included a name which was permitted by the permitted subtree but also excluded by excluded subtree, it would be accepted. Fixed in versions 3.5.0 and 2.19.5.
5.3
Medium
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.