VDB
GCVE-110-MAGEIA-2024-297
GCVE-110-MAGEIA-2024-297
Advisory Published
An attacker could present an ECDSA X.509 certificate using explicit
encoding where the parameters are very large.
When parsing, the parameter is checked to be prime, causing excessive
computation. This was patched in 2.19.4 and 3.3.0 to allow the prime
parameter of the elliptic curve to be at most 521 bits. No known
workarounds are available. Note that support for explicit encoding of
elliptic curve parameters is deprecated in Botan.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | botan2 | 0 (affected), 2.19.5-1.mga9 (unaffected) | — |
Aliases
Browse GCVE Records
74,496 records in the GCVE database · Updated July 23, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.