Critical severity9.1NVD Advisory· Published Nov 27, 2022· Updated Jun 17, 2026
CVE-2022-43705
CVE-2022-43705
Description
In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:botan_project:botan:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:botan_project:botan:*:*:*:*:*:*:*:*range: >=1.11.34,<2.19.3
- (no CPE)range: <2.19.3
- Botan/Botandescription
- osv-coords5 versionspkg:rpm/opensuse/Botan&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/Botan&distro=openSUSE%20Leap%2015.4pkg:rpm/opensuse/Botan&distro=openSUSE%20Tumbleweedpkg:rpm/suse/Botan&distro=SUSE%20Package%20Hub%2015%20SP3pkg:rpm/suse/Botan&distro=SUSE%20Package%20Hub%2015%20SP4
< 2.10.0-bp153.3.3.1+ 4 more
- (no CPE)range: < 2.10.0-bp153.3.3.1
- (no CPE)range: < 2.18.2-bp154.2.3.1
- (no CPE)range: < 2.19.3-1.1
- (no CPE)range: < 2.10.0-bp153.3.3.1
- (no CPE)range: < 2.18.2-bp154.2.3.1
Patches
Vulnerability mechanics
References
2- github.com/randombit/botan/releases/tag/2.19.3nvdRelease NotesThird Party Advisory
- github.com/randombit/botan/security/advisories/GHSA-4v9w-qvcq-6q7wnvdMitigationThird Party Advisory
News mentions
0No linked articles in our index yet.