CVE-2018-9860

An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC ciphertext could cause the receiving side to include in the HMAC computation exactly 64K bytes of data following the record buffer, aka an over-read. The MAC comparison will subsequently fail and the connection will be closed. This could be used for denial of service. No information leak occurs.

References

Affected packages

Git / github.com/randombit/botan

Affected ranges

Type

GIT

Repo

https://github.com/randombit/botan

Events

Introduced

c83872bb775916d88196fb2eca6971329711e2d3

Fixed

d7d080992372cf4fbd569cce1d8cd6aa7599fa0d

Database specific

{
    "versions": [
        {
            "introduced": "1.11.32"
        },
        {
            "fixed": "2.6.0"
        }
    ]
}

Affected versions

1.*

1.11.32

1.11.33

1.11.34

2.*

2.0.0

2.0.1

2.1.0

2.2.0

2.3.0

2.4.0

2.5.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-9860.json"