CVE-2026-32883 in randombit botan
摘要 (英语)
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0.
负责
GitHub_M
预定
2026-03-16
披露
2026-03-31
条目
VulDB provides additional information and datapoints for this CVE:
| 标识符 | 漏洞 | CWE | 可利用 | 对策 | CVE |
|---|---|---|---|---|---|
| 354272 | randombit botan X509 Path Validation 弱身份验证 | 347 | 未定义 | 官方修复 | CVE-2026-32883 |