CVE-2017-2801: Critical severity botan vulnerability
A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2801?
CVE-2017-2801 is considered to have a high severity due to its potential to impact certificate verification.
How do I fix CVE-2017-2801?
To fix CVE-2017-2801, upgrade the Randombit Botan cryptographic library to version 2.0.2 or later.
What types of applications are affected by CVE-2017-2801?
CVE-2017-2801 affects applications that utilize the Botan library for cryptographic operations.
What could an attacker do by exploiting CVE-2017-2801?
An attacker could exploit CVE-2017-2801 to deliver a specially crafted X509 certificate that bypasses normal verification processes.
Is CVE-2017-2801 present in earlier versions of Botan?
Yes, CVE-2017-2801 was introduced in Botan version 2.0.1, making that version vulnerable.