CVE-2014-9742

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-05-13 · updated 2026-06-17
Weakness: CWE-310

Description

The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a DH group.

Affected products

randombit botan: through 1.10.7; 1.11.0, 1.11.1, 1.11.2, 1.11.3, 1.11.4, 1.11.5 (+3)

References

http://botan.randombit.net/security.html
http://marc.info/?l=botan-devel&m=139717503205066&w=2
http://botan.randombit.net/security.html
http://marc.info/?l=botan-devel&m=139717503205066&w=2

Get alerted when CVE-2014-9742 or the next vulnerability affects your stack