CVE-2016-9132

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-9132
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9132.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-9132
Downstream
Related
Published
2017-01-30T22:59:00.827Z
Modified
2026-03-14T09:21:27.657420Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.

References

Affected packages

Git / github.com/randombit/botan

Affected ranges

Type
GIT
Repo
https://github.com/randombit/botan
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5de3c5deb3ef63e1759bdf73337ffb45e063dd9c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bc9f1bba06234d7d3c58e6fa5fe53192a805ba02
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e2da31f127c7137d7ec945b8942dd88567fac566
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1049dec9634cdc68928c4e688dd609ed758ab06c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4ef3cf0ae31a2b167b8c9ca17e9a0d1f7eb5ac8e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
efa7cabca1fe897d10f3c4addeb7739fa81e47a2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ce41409eb6ae9a25ac3aeb496e28a4be73c0ae05
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cfbe5126db44ea0a2e8f24dbaaca2126267f78d2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9032fa6c541eb51c47dc7971b5d82171a1274db7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a532e4604b8ca33ff5319a975325d06c01438138
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8bbe84e9f2d39212c389a39e7d2fa749e64068fd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e7d229f20b712a3d31f5c2ce2cce764e72b7de89
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c1d53d08bb945119663ed41c4a67c30a427e3e67
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a7c23742ed5853034f836e6da3035a923ab79d7e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
db82b83984a1525d2d8b62e0edeff702f0852a97
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b158a23eb8495b442eaa70bdde077355c77bca7b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
72a7434e65061d61ec6d4bd2b78a0ca5406e41ad
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1bbab4ef0544388a46f02ab2985ada55a82c0e9d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
226d96ee4e64994beb9ec9436a29ac6656d61924
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
461e0b52e176ec7e4ebb5d0eaa0e0c53742066c9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e34b9693d203dcb17e396ba58c00489c7d02a98c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2b35226d37d96a0f98b008e759fe04f234d255b4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bebb9baf59ede63a4ae9ee45b1790c8d5a16d7c0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
50fc7b15553d888d95bee72972e53eae27a82c1f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4cebacfcf6d819d8d14fb87863ffb74fbd26e409
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e25bbc9b8ff24931b34507a10fe08fe3dd592b17
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2c4c5b376130b55e092b2aa0ba47b97bfc31962c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
65ab36776317f73ddf0f2d3bd6c1c7e35608962f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d5af39b6306086baa4159a18ad833b1c3e1e573b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7abb472af00e9078943ccca8c90757ab591e10a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c994122b8b42a42a6f7709e4d7755036604990ce
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ac2f16b27ff6513bf51fcaad4f1bf4be31af2fe2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
053e8963882df7f24797697fc7689e8a32267c95
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2438c2c60c6dfbec24c4d6df97c1875624f9485c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5f59d4f1a2f36c5a5ac10d03ec8109621a0515d8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e2285a7ca00630753b2601cf178a81162f2f6fa9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
82e218500e6f305d02feecc000b43a5d9448e11a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
215704f501dab98a3c1d235f7b0c1f03d02d232f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c1d66a6bfdd9458c838790369dae42f247f79889
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
683534c493e31f8b23b83c248c3303edc5ea64f9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fb0b7658d780a403891a268c8cfd99ba670f61f2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
dfb7bf33816e3350bc05563743e6eb22c4737a51
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d3f3d8f15da31dc9cda9857980ba216433a0e9f2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eeac75df59d478882d53c05ece2302964225ad9a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fee379d79b6a1ce3652aab2fcd2ba716aedc97e8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
43462f8d24880c42ce66ea45a76c7611fdab25cd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
94a3fa8ae0dc4df67f6e9ba780427e651baa9dfd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a4b5f14b6ceac859eec9a0e5825f89ee45eec11c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c0d847b20cbc1b7d8b29705072e1f9c4715d48ae
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f79e642ab8c09971968abdfe6990df6801711e1f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ee912cd748a9b0bf56c84a49896dd2d57e0f81a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0f301b1bc6ec4dcb4626cf7050c300abe1fef814
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c6147dcfb05a8df25ed74253b0a7e768fae19158
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bcee79d0d4dff8c0cbe4d753171359d565aca9c7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
822daab5f8392e9b8a2e219991f8adeffd101da9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
260de31d40e36239c7a27520ab0f7fbe0c3c90b4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
6a5c0019c5976226c9b4c80bca3aff70efb82897
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c691530064534882c7f43d996bb200e0c8d3d57f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9241078d8797433779600b08fed5313dc30f3a76
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a69436e3cb4b91ec835673145fd4dbe703342a4c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
746844ba82d7c1b8e80dcda3da779fcc1bb495a3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c78b2e26875a8726d0ac7a10af2c86b57860d3fb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bfaeed3848727c4f8e7ac71ff886360d0f4b19a1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e05de6c4c5c37e66f89394019dd1045b7a2f8af0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a9aebb6c08eb7d78a62283c33ece17b73e7c2f8c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7489ab66e1814cb6cc0f6b8f7f5f36edc3eb567a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
01226c4ef4eb9be841a65cf6e3ac1c343bd922a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0bac9f292b133439311dddb2642bff1041becbd7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e27b169d4cebfc9c80e3b9cd273cb355969a877e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
22dc8165392711e424efcb2724fd69b1ab68abd5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2a7a4a77cb6af113fc3251960554b96b332edc86
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1ed5d9e990353e5d4f1b8dcf42afc143b0abe933
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1203405e412c0d9b6268046ab342167bb2f5792b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cb4ab0662dfbe462dbe578ffa7d6f44effa51d82
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
91c194957a12b174f4a51f41319b0d9604450d87
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9d3ad9a0f44a9321185ed9f221c828dac81b9f0c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fb22198b9add1f1d46d6b05cc8626b7a8d8ff9c6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
87a59dd0ea8a783540d30bb697b4c86d9b66f7ee
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
67a756ac2bef809be53ccdce7773682547c857eb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0b6d2a853638206dfa43420d5419e8b719505cc7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5e946f93e8e751d2104f58583d4f209ca631aff1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c83872bb775916d88196fb2eca6971329711e2d3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
560c0e5623cd9ef704b06c56b7e827e7431ae1a8
Fixed
987ad747db6d0d7e36f840398f3cf02e2fbfd90f
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.9.18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.10.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.14"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.15"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.16"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.17"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.18"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.19"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.20"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.21"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.24"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.25"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.26"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.27"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.28"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.29"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.30"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.31"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.11.33"
        }
    ]
}

Affected versions

1.*
1.10.0
1.10.0-rc1
1.10.1
1.11.0
1.11.1
1.11.10
1.11.11
1.11.12
1.11.13
1.11.14
1.11.15
1.11.16
1.11.17
1.11.18
1.11.19
1.11.2
1.11.20
1.11.21
1.11.22
1.11.23
1.11.24
1.11.25
1.11.26
1.11.27
1.11.28
1.11.29
1.11.3
1.11.30
1.11.31
1.11.32
1.11.33
1.11.4
1.11.5
1.11.6
1.11.7
1.11.8
1.11.9
1.5.10
1.5.11
1.5.12
1.5.13
1.5.6
1.5.7
1.5.8
1.5.9
1.6.0
1.6.1
1.6.2
1.6.3
1.7.0
1.7.1
1.7.10
1.7.11
1.7.12
1.7.13
1.7.14
1.7.15
1.7.16
1.7.17
1.7.18
1.7.19
1.7.2
1.7.20
1.7.21
1.7.22
1.7.23
1.7.24
1.7.3
1.7.4
1.7.5
1.7.6
1.7.7
1.7.8
1.7.9
1.8.0
1.8.1
1.8.2
1.8.3
1.8.4
1.8.5
1.8.6
1.8.7
1.8.8
1.9.0
1.9.1
1.9.10
1.9.11
1.9.12
1.9.13
1.9.14
1.9.15
1.9.16
1.9.17
1.9.18
1.9.2
1.9.3
1.9.4
1.9.5
1.9.6
1.9.7
1.9.8
1.9.9

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.10.10"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-9132.json"