CVE-2018-9860: An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC ciphertext could cause the receiving…

PriorityP432high7.5CVSS 3.0

AVNACLPRNUINSUCNINAH

EPSS

1.38%

69.1th percentile

An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An off-by-one error when processing malformed TLS-CBC ciphertext could cause the receiving side to include in the HMAC computation exactly 64K bytes of data following the record buffer, aka an over-read. The MAC comparison will subsequently fail and the connection will be closed. This could be used for denial of service. No information leak occurs.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
botan_project	botan	>= 0 < 2.4.0-6	2.4.0-6
botan_project	botan	>= 0 < 2.4.0-6	2.4.0-6
botan_project	botan	>= 0 < 2.4.0-6	2.4.0-6
botan_project	botan	>= 1.11.32 < 2.6.0	2.6.0
debian	botan	< botan 2.4.0-6 (bookworm)	botan 2.4.0-6 (bookworm)

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

osv7.5HIGH

vendor_debian7.5HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.