Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. Prior to 3.5.0 and 2.19.5, checking name constraints in X.509 certificates is quadratic in the number of names and name constraints. An attacker who presented a certificate chain which contained a very large number of names in the SubjectAlternativeName, signed by a CA certificate which contained a large number of name constraints, could cause a denial of service. The problem has been addressed in Botan 3.5.0 and a partial backport has also been applied and is included in Botan 2.19.5.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7586-1 advisory.

    It was discovered that Botan could have compiler dependent operations induced under certain circumstances.
    An attacker could possibly use this issue to cause undefined behavior. (CVE-2024-50382, CVE-2024-50383)

    Bing Shi discovered that Botan did not limit the size of certain inputs when checking primality and name     constraints. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-34702,     CVE-2024-34703)

    It was discovered that Botan did not correctly handle conflicting name constraints. An attacker could     possibly use this issue to bypass authentication. (CVE-2024-39312)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an
    object identifier or using explicit encoding of the parameters. Prior to 3.5.0 and 2.19.5, checking name
    constraints in X.509 certificates is quadratic in the number of names and name constraints. An attacker
    who presented a certificate chain which contained a very large number of names in the
    SubjectAlternativeName, signed by a CA certificate which contained a large number of name constraints,
    could cause a denial of service. The problem has been addressed in Botan 3.5.0 and a partial backport has
    also been applied and is included in Botan 2.19.5. (CVE-2024-34702)

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an
    object identifier or using explicit encoding of the parameters. A bug in the parsing of name constraint
    extensions in X.509 certificates meant that if the extension included both permitted subtrees and excluded
    subtrees, only the permitted subtree would be checked. If a certificate included a name which was
    permitted by the permitted subtree but also excluded by excluded subtree, it would be accepted. Fixed in
    versions 3.5.0 and 2.19.5. (CVE-2024-39312)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an     object identifier or using explicit encoding of the parameters. Prior to 3.5.0 and 2.19.5, checking name     constraints in X.509 certificates is quadratic in the number of names and name constraints. An attacker     who presented a certificate chain which contained a very large number of names in the     SubjectAlternativeName, signed by a CA certificate which contained a large number of name constraints,     could cause a denial of service. The problem has been addressed in Botan 3.5.0 and a partial backport has     also been applied and is included in Botan 2.19.5. (CVE-2024-34702)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an
    object identifier or using explicit encoding of the parameters. Prior to 3.5.0 and 2.19.5, checking name
    constraints in X.509 certificates is quadratic in the number of names and name constraints. An attacker
    who presented a certificate chain which contained a very large number of names in the
    SubjectAlternativeName, signed by a CA certificate which contained a large number of name constraints,
    could cause a denial of service. The problem has been addressed in Botan 3.5.0 and a partial backport has
    also been applied and is included in Botan 2.19.5. (CVE-2024-34702)

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an
    object identifier or using explicit encoding of the parameters. Prior to versions 3.3.0 and 2.19.4, an
    attacker could present an ECDSA X.509 certificate using explicit encoding where the parameters are very
    large. The proof of concept used a 16Kbit prime for this purpose. When parsing, the parameter is checked
    to be prime, causing excessive computation. This was patched in 2.19.4 and 3.3.0 to allow the prime
    parameter of the elliptic curve to be at most 521 bits. No known workarounds are available. Note that
    support for explicit encoding of elliptic curve parameters is deprecated in Botan. (CVE-2024-34703)

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an
    object identifier or using explicit encoding of the parameters. A bug in the parsing of name constraint
    extensions in X.509 certificates meant that if the extension included both permitted subtrees and excluded
    subtrees, only the permitted subtree would be checked. If a certificate included a name which was
    permitted by the permitted subtree but also excluded by excluded subtree, it would be accepted. Fixed in
    versions 3.5.0 and 2.19.5. (CVE-2024-39312)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7f42bafbdb advisory.

    Rebase to v2.19.5

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6d84a608f1 advisory.

    Rebase to v2.19.5

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0201-1 advisory.

    Update to 2.19.5:

    * Fix multiple Denial of service attacks due to X.509 cert processing:
    * CVE-2024-34702 - boo#1227238
    * CVE-2024-34703 - boo#1227607
    * CVE-2024-39312 - boo#1227608
    * Fix a crash in OCB
    * Fix a test failure in compression with certain versions of zlib
    * Fix some iterator debugging errors in TLS CBC decryption.
    * Avoid a miscompilation in ARIA when using XCode 14

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
240496	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : Botan vulnerabilities (USN-7586-1)	Nessus	Ubuntu Local Security Checks	medium
423756	Alpine: multiple botan3 packages, py3-botan3: security update to 3.5.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
423756	Alpine: multiple botan3 packages, py3-botan3: security update to 3.5.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
423747	Alpine: multiple botan packages: security update to 2.19.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
423747	Alpine: multiple botan packages: security update to 2.19.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
227908	Linux Distros Unpatched Vulnerability : CVE-2024-34702	Nessus	Misc.	medium
420961	Alpine: botan3: security update to 3.5.0-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
420961	Alpine: botan3: security update to 3.5.0-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
408533	Alpine: botan: security update to 2.19.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
408533	Alpine: botan: security update to 2.19.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
202732	Fedora 40 : botan2 (2024-7f42bafbdb)	Nessus	Fedora Local Security Checks	medium
202731	Fedora 39 : botan2 (2024-6d84a608f1)	Nessus	Fedora Local Security Checks	medium
202559	openSUSE 15 Security Update : Botan (openSUSE-SU-2024:0201-1)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2024-34702

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium