CVE-2015-7825: High severity botan vulnerability
botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a certificate with a loop in the certificate chain.
Other sources
When evaluating a certificate path, if a loop in the certificate chain was encountered (for instance where C1 certifies C2, which certifies C1) an infinite loop would occur eventually resulting in memory exhaustion.
External references:
http://botan.randombit.net/security.html
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7825?
CVE-2015-7825 has a severity rating that indicates potential for denial of service due to improper validation of certificate paths.
How do I fix CVE-2015-7825?
To fix CVE-2015-7825, update Botan to version 1.11.22 or later.
What types of attacks can CVE-2015-7825 be used for?
CVE-2015-7825 can be exploited by remote attackers to cause a denial of service through infinite loops and memory consumption.
Who is affected by CVE-2015-7825?
CVE-2015-7825 affects users of Botan versions prior to 1.11.22.
What is the nature of the vulnerability in CVE-2015-7825?
CVE-2015-7825 involves improper validation of certificate paths when a loop in the certificate chain is encountered.