CVE catalog

CVE-2014-9742

Security update for Botan

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.43% · Oct 25, 2026

The Miller-Rabin primality check in Botan before 1.10.8 and 1.11.x before 1.11.9 improperly uses a single random base, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a DH group.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntubotan1.1014.041.10.5-1vulnerable
Ubuntubotan1.1014.041.10.5-1ubuntu1vulnerable
Ubuntubotan1.1014.041.10.5-1+deb7u1ubuntu0.14.04.1fixed
Debianbotan1.1071.10.5-1vulnerable
Debianbotan1.1071.10.5-1+deb7u1fixed
SuseBotanlinux enterprise software development kit 12 sp11.10.9-3.1fixed
SuseBotanlinux enterprise software development kit 12 sp21.10.9-3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntubotan1.10deb14.041.10.5-1+deb7u1ubuntu0.14.04.1Not reportedUBUNTU-CVE-2014-9742Not reported
Debianbotan1.10deb71.10.5-1+deb7u1Not reportedDLA-449-1Not reported
SuseBotanrpmlinux enterprise software development kit 12 sp11.10.9-3.1Not reportedSUSE-SU-2017:1222-1Not reported
SuseBotanrpmlinux enterprise software development kit 12 sp21.10.9-3.1Not reportedSUSE-SU-2017:1222-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]