Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass
Résumé
Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Botan is a C++ cryptography library. From version 3.0.0 to before version 3.11.0, during X509 path validation, OCSP responses were checked for an appropriate status code, but critically omitted verifying the signature of the OCSP response itself. This issue has been patched in version 3.11.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2026-32883 botan3 Corrigé dans: 3.11.0-r0
- Debian DEBIAN-CVE-2026-32883 botan3 Corrigé dans: 3.11.0+dfsg-2
- Ubuntu UBUNTU-CVE-2026-32883 botan1.10
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov