CVE-2016-2196: Buffer Overflow
Published May 13, 2016
·Updated
Heap-based buffer overflow in the P-521 reduction function in Botan 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (memory overwrite and crash) or execute arbitrary code via unspecified vectors.
Affected Software
27 affected components
Botan Project Botan=1.11.0
Botan Project Botan=1.11.1
Botan Project Botan=1.11.2
Botan Project Botan=1.11.3
Botan Project Botan=1.11.4
Botan Project Botan=1.11.5
Botan Project Botan=1.11.6
Botan Project Botan=1.11.7
Botan Project Botan=1.11.8
Botan Project Botan=1.11.9
Botan Project Botan=1.11.10
Botan Project Botan=1.11.11
Botan Project Botan=1.11.12
Botan Project Botan=1.11.13
Botan Project Botan=1.11.14
Botan Project Botan=1.11.15
Botan Project Botan=1.11.16
Botan Project Botan=1.11.17
Botan Project Botan=1.11.18
Botan Project Botan=1.11.19
Botan Project Botan=1.11.20
Botan Project Botan=1.11.21
Botan Project Botan=1.11.22
Botan Project Botan=1.11.23
Botan Project Botan=1.11.24
Botan Project Botan=1.11.25
Botan Project Botan=1.11.26
Event History
May 13, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2196?
CVE-2016-2196 has a high severity, as it can lead to denial of service or remote code execution.
2
How do I fix CVE-2016-2196?
To fix CVE-2016-2196, upgrade Botan to version 1.11.27 or later.
3
Which versions of Botan are affected by CVE-2016-2196?
All versions of Botan from 1.11.0 to 1.11.26 are affected by CVE-2016-2196.
4
What type of vulnerability is CVE-2016-2196?
CVE-2016-2196 is a heap-based buffer overflow vulnerability.
5
Can CVE-2016-2196 be exploited remotely?
Yes, CVE-2016-2196 can be exploited remotely, allowing attackers to cause a denial of service or execute arbitrary code.