Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an object identifier or using explicit encoding of the parameters. Prior to versions 3.3.0 and 2.19.4, an attacker could present an ECDSA X.509 certificate using explicit encoding where the parameters are very large. The proof of concept used a 16Kbit prime for this purpose. When parsing, the parameter is checked to be prime, causing excessive computation. This was patched in 2.19.4 and 3.3.0 to allow the prime parameter of the elliptic curve to be at most 521 bits. No known workarounds are available. Note that support for explicit encoding of elliptic curve parameters is deprecated in Botan.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7586-1 advisory.

    It was discovered that Botan could have compiler dependent operations induced under certain circumstances.
    An attacker could possibly use this issue to cause undefined behavior. (CVE-2024-50382, CVE-2024-50383)

    Bing Shi discovered that Botan did not limit the size of certain inputs when checking primality and name     constraints. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-34702,     CVE-2024-34703)

    It was discovered that Botan did not correctly handle conflicting name constraints. An attacker could     possibly use this issue to bypass authentication. (CVE-2024-39312)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an
    object identifier or using explicit encoding of the parameters. Prior to versions 3.3.0 and 2.19.4, an
    attacker could present an ECDSA X.509 certificate using explicit encoding where the parameters are very
    large. The proof of concept used a 16Kbit prime for this purpose. When parsing, the parameter is checked
    to be prime, causing excessive computation. This was patched in 2.19.4 and 3.3.0 to allow the prime
    parameter of the elliptic curve to be at most 521 bits. No known workarounds are available. Note that
    support for explicit encoding of elliptic curve parameters is deprecated in Botan. (CVE-2024-34703)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an     object identifier or using explicit encoding of the parameters. Prior to versions 3.3.0 and 2.19.4, an     attacker could present an ECDSA X.509 certificate using explicit encoding where the parameters are very     large. The proof of concept used a 16Kbit prime for this purpose. When parsing, the parameter is checked     to be prime, causing excessive computation. This was patched in 2.19.4 and 3.3.0 to allow the prime     parameter of the elliptic curve to be at most 521 bits. No known workarounds are available. Note that     support for explicit encoding of elliptic curve parameters is deprecated in Botan. (CVE-2024-34703)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an
    object identifier or using explicit encoding of the parameters. Prior to 3.5.0 and 2.19.5, checking name
    constraints in X.509 certificates is quadratic in the number of names and name constraints. An attacker
    who presented a certificate chain which contained a very large number of names in the
    SubjectAlternativeName, signed by a CA certificate which contained a large number of name constraints,
    could cause a denial of service. The problem has been addressed in Botan 3.5.0 and a partial backport has
    also been applied and is included in Botan 2.19.5. (CVE-2024-34702)

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an
    object identifier or using explicit encoding of the parameters. Prior to versions 3.3.0 and 2.19.4, an
    attacker could present an ECDSA X.509 certificate using explicit encoding where the parameters are very
    large. The proof of concept used a 16Kbit prime for this purpose. When parsing, the parameter is checked
    to be prime, causing excessive computation. This was patched in 2.19.4 and 3.3.0 to allow the prime
    parameter of the elliptic curve to be at most 521 bits. No known workarounds are available. Note that
    support for explicit encoding of elliptic curve parameters is deprecated in Botan. (CVE-2024-34703)

  - Botan is a C++ cryptography library. X.509 certificates can identify elliptic curves using either an
    object identifier or using explicit encoding of the parameters. A bug in the parsing of name constraint
    extensions in X.509 certificates meant that if the extension included both permitted subtrees and excluded
    subtrees, only the permitted subtree would be checked. If a certificate included a name which was
    permitted by the permitted subtree but also excluded by excluded subtree, it would be accepted. Fixed in
    versions 3.5.0 and 2.19.5. (CVE-2024-39312)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-7f42bafbdb advisory.

    Rebase to v2.19.5

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-6d84a608f1 advisory.

    Rebase to v2.19.5

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0201-1 advisory.

    Update to 2.19.5:

    * Fix multiple Denial of service attacks due to X.509 cert processing:
    * CVE-2024-34702 - boo#1227238
    * CVE-2024-34703 - boo#1227607
    * CVE-2024-39312 - boo#1227608
    * Fix a crash in OCB
    * Fix a test failure in compression with certain versions of zlib
    * Fix some iterator debugging errors in TLS CBC decryption.
    * Avoid a miscompilation in ARIA when using XCode 14

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:2415-1 advisory.

    Security fixes:

    - CVE-2024-34703: Fixed denial of service due to overly large elliptic curve parameters in Botan     (bsc#1227239)

    Other fixes:

    - Mozilla Thunderbird 115.12.1
      * 115.12.0 got pulled because of upstream automation process errors         and Windows installer signing changes.
        No code changes, changelog is the same as 115.12.0 (bsc#1226495)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
240496	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : Botan vulnerabilities (USN-7586-1)	Nessus	Ubuntu Local Security Checks	medium
423754	Alpine: multiple botan packages: security update to 2.19.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
423754	Alpine: multiple botan packages: security update to 2.19.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
228114	Linux Distros Unpatched Vulnerability : CVE-2024-34703	Nessus	Misc.	high
408533	Alpine: botan: security update to 2.19.5-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
408533	Alpine: botan: security update to 2.19.5-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
408532	Alpine: botan: security update to 2.19.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
408532	Alpine: botan: security update to 2.19.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
202732	Fedora 40 : botan2 (2024-7f42bafbdb)	Nessus	Fedora Local Security Checks	medium
202731	Fedora 39 : botan2 (2024-6d84a608f1)	Nessus	Fedora Local Security Checks	medium
202559	openSUSE 15 Security Update : Botan (openSUSE-SU-2024:0201-1)	Nessus	SuSE Local Security Checks	medium
202333	SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2024:2415-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-34703

high

Tenable Plugins

medium

high

high

high

medium

medium

high

high

medium

medium

medium

high