| Bug | Description |
|---|
| CVE-2018-20187 | A side-channel issue was discovered in Botan before 2.9.0. An attacker ... |
| CVE-2018-12435 | Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache side-chan ... |
| CVE-2018-9860 | An issue was discovered in Botan 1.11.32 through 2.x before 2.6.0. An ... |
| CVE-2017-7252 | bcrypt password hashing in Botan before 2.1.0 does not correctly handl ... |
| CVE-2017-2801 | A programming error exists in a way Randombit Botan cryptographic libr ... |
| CVE-2016-8871 | In Botan 1.11.29 through 1.11.32, RSA decryption with certain padding ... |
| CVE-2016-6879 | The X509_Certificate::allowed_usage function in botan 1.11.x before 1. ... |
| CVE-2016-6878 | The Curve25519 code in botan before 1.11.31, on systems without a nati ... |
| CVE-2016-2850 | Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signat ... |
| CVE-2016-2849 | Botan before 1.10.13 and 1.11.x before 1.11.29 do not use a constant-t ... |
| CVE-2016-2196 | Heap-based buffer overflow in the P-521 reduction function in Botan 1. ... |
| CVE-2016-2195 | Integer overflow in the PointGFp constructor in Botan before 1.10.11 a ... |
| CVE-2016-2194 | The ressol function in Botan before 1.10.11 and 1.11.x before 1.11.27 ... |
| CVE-2015-7827 | Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remo ... |
| CVE-2015-7826 | botan 1.11.x before 1.11.22 improperly handles wildcard matching again ... |
| CVE-2015-7825 | botan before 1.11.22 improperly validates certificate paths, which all ... |
| CVE-2015-7824 | botan 1.11.x before 1.11.22 makes it easier for remote attackers to de ... |
| CVE-2015-5727 | The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11. ... |
| CVE-2015-5726 | The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11. ... |
| CVE-2014-9742 | The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x bef ... |