Vulnerabilities in randombit
10 resultsVexday analysis
A Randombit apresenta um perfil de risco moderado com 9 CVEs identificadas, sendo 1 crítica e nenhuma sob ataque ativo no momento. A fraqueza dominante é validação inadequada de certificados (CWE-295), um vetor tradicional de comprometimento de comunicações. O ritmo de divulgações é controlado, com apenas 1 vulnerabilidade publicada nos últimos 90 dias, sugerindo exposição residual rather than uma campanha de descoberta recente.
CVE-2017-2801MEDIUMA programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead EPSS 1.3%CVE-2024-34702MEDIUMBotan has a Denial of Service Due to Excessive Name ConstraintsEPSS 0.8%CVE-2024-34703HIGHBotan Vulnerable to Denial of Service Due to Overly Large Elliptic Curve ParametersEPSS 0.5%CVE-2026-44378MEDIUMBotan: Quadratic complexity decoding BER indefinite length encodingsEPSS 0.3%CVE-2026-32877HIGHBotan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash FieldEPSS 0.3%CVE-2024-39312MEDIUMBotan has an Authorization Error due to Name Constraint Decoding BugEPSS 0.3%CVE-2026-34580CRITICALBotan has a certificate authentication bypass due to trust anchor confusionEPSS 0.2%CVE-2026-34582HIGHBotan has a TLS 1.3 certificate authentication bypassEPSS 0.2%CVE-2026-32884MEDIUMBotan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)EPSS 0.2%CVE-2026-32883MEDIUMBotan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation BypassEPSS 0.2%