In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016).
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/43xxx/CVE-2022-43705.json"
}{
"extracted_events": [
{
"range": [
{
"introduced": "0"
},
{
"fixed": "2.19.3"
}
],
"source": "DESCRIPTION"
},
{
"original_tag": "2.19.3",
"range": [
{
"fixed": "15dc32f12d05e99a267f0fc47d88b678b71b8b05"
}
],
"source": "REFERENCES_TAG"
},
{
"cpe": "cpe:2.3:a:botan_project:botan:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.11.34"
},
{
"fixed": "2.19.3"
}
],
"source": "CPE_RANGE"
}
]
}