CVE-2017-2801

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-05-24 · updated 2026-06-17
Weakness: CWE-125

Description

A programming error exists in a way Randombit Botan cryptographic library version 2.0.1 implements x500 string comparisons which could lead to certificate verification issues and abuse. A specially crafted X509 certificate would need to be delivered to the client or server application in order to trigger this vulnerability.

Affected products

randombit botan: 2.0.1

References

http://talosintelligence.com/vulnerability_reports/TALOS-2017-0294
http://www.debian.org/security/2017/dsa-3939
http://www.securityfocus.com/bid/98106
http://talosintelligence.com/vulnerability_reports/TALOS-2017-0294
http://www.debian.org/security/2017/dsa-3939
http://www.securityfocus.com/bid/98106

Get alerted when CVE-2017-2801 or the next vulnerability affects your stack