CVE-2022-43705: In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November…

PriorityP340critical9.1CVSS 3.1

AVNACLPRNUINSUCHIHAN

EPSS

0.41%

33.7th percentile

In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016).

Affected

4 ranges

Vendor	Product	Version range	Fixed in
botan_project	botan	>= 0 < 2.19.3+dfsg-1	2.19.3+dfsg-1
botan_project	botan	>= 0 < 2.19.3+dfsg-1	2.19.3+dfsg-1
botan_project	botan	>= 1.11.34 < 2.19.3	2.19.3
debian	botan	< botan 2.19.3+dfsg-1 (bookworm)	botan 2.19.3+dfsg-1 (bookworm)

CVSS provenance

nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

osv9.1CRITICAL

vendor_debian9.1CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.