CVE-2016-2850

—

CVSS 3.0

7.5 high

EPSS

2%p81

Published

May 13, 2016 (May 13, 2016)

Modified

Jun 17, 2026

Description

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

Vendors: fedoraproject botan project
Products: fedora, botan
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.