CVE-2016-2850 in Botan

सारांश

द्वारा VulDB • 02/07/2026

Botan 1.11.x versions prior to 1.11.29 do not enforce TLS policy for (1) signature algorithms and (2) ECC curves, allowing remote attackers to perform downgrade attacks through unspecified vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• आरक्षित करना: 06/03/2016
• प्रकटीकरण: 13/05/2016
• संयम: स्वीकृत
• प्रविष्टि: VDB-87397
• CPE: तैयार
• CWE: CWE-20 (पुष्टि की गई)
• CVSS: 7.5 (NVD)
• EPSS: 0.02118
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2850
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2850
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2850/