The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 allows remote attackers to cause a denial of service (infinite loop) via unspecified input to the OS2ECP function, related to a composite modulus.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2194.json"