VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jan 30, 2017· Updated Jun 17, 2026

CVE-2016-9132

CVE-2016-9132

Description

In Botan 1.8.0 through 1.11.33, when decoding BER data an integer overflow could occur, which would cause an incorrect length field to be computed. Some API callers may use the returned (incorrect and attacker controlled) length field in a way which later causes memory corruption or other failure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

89
  • Botan Project/Botan85 versions
    cpe:2.3:a:botan_project:botan:1.10.0:*:*:*:*:*:*:*+ 84 more
    • cpe:2.3:a:botan_project:botan:1.10.0:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.1:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.10:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.11:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.12:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.13:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.14:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.15:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.2:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.3:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.4:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.5:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.6:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.7:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.8:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.10.9:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.10:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.11:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.12:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.13:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.14:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.15:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.16:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.17:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.18:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.19:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.2:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.20:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.21:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.23:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.24:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.25:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.26:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.27:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.28:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.29:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.3:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.30:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.31:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.32:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.33:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.4:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.5:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.6:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.7:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.8:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.11.9:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.10:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.11:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.12:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.13:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.14:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.15:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.6:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.7:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.8:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.8.9:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.10:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.11:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.12:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.13:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.14:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.15:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.16:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.17:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.18:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.4:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.5:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.6:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.7:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.8:*:*:*:*:*:*:*
    • cpe:2.3:a:botan_project:botan:1.9.9:*:*:*:*:*:*:*
    • (no CPE)range: 1.8.0 - 1.11.33
  • osv-coords4 versions
    pkg:rpm/opensuse/Botan&distro=openSUSE%20Tumbleweedpkg:rpm/suse/Botan&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2011%20SP4pkg:rpm/suse/Botan&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP1pkg:rpm/suse/Botan&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2
    < 2.18.1-1.3+ 3 more
    • (no CPE)range: < 2.18.1-1.3
    • (no CPE)range: < 1.6.5-4.1
    • (no CPE)range: < 1.10.9-3.1
    • (no CPE)range: < 1.10.9-3.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.