CVE-2018-9127

published 2018-04-02

CVE-2018-9127: Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept certain certificates as valid for hostnames when, under RFC 6125…

Priority P3 37 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

Botan 2.2.0 - 2.4.0 (fixed in 2.5.0) improperly handled wildcard certificates and could accept certain certificates as valid for hostnames when, under RFC 6125 rules, they should not match. This only affects certificates issued to the same domain as the host, so to impersonate a host one must already have a wildcard certificate matching other hosts in the same domain. For example, b*.example.com would match some hostnames that do not begin with a 'b' character.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
botan_project	botan	>= 0 < 2.4.0-5	2.4.0-5
botan_project	botan	>= 0 < 2.4.0-5	2.4.0-5
botan_project	botan	>= 0 < 2.4.0-5	2.4.0-5
botan_project	botan	2.2.0 – 2.4.0	—
debian	botan	< botan 2.4.0-5 (bookworm)	botan 2.4.0-5 (bookworm)

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

osv 9.8 CRITICAL

vendor_debian 9.8 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-295