CVE-2014-9742: High severity Botan Project Botan vulnerability
The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a DH group.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9742?
CVE-2014-9742 has been rated as a high severity vulnerability due to the potential for remote attackers to compromise cryptographic protections.
How do I fix CVE-2014-9742?
To fix CVE-2014-9742, upgrade Botan to version 1.10.8 or 1.11.9 or later.
What types of software are affected by CVE-2014-9742?
Botan versions prior to 1.10.8 and all 1.11.x versions before 1.11.9 are affected by CVE-2014-9742.
What is the impact of CVE-2014-9742 on applications?
CVE-2014-9742 may allow attackers to weaken cryptographic protections in applications relying on Botan for key exchange.
Is there a known exploit for CVE-2014-9742?
While no specific exploits have been publicly disclosed, the vulnerability's nature implies a risk of exploitation by attackers.