CVE-2015-7825: Botan Project Botan

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

botan before 1.11.22 improperly validates certificate paths, which allows remote attackers to cause a denial of service (infinite loop and memory consumption) via a certificate with a loop in the certificate chain.

Affected products

• Botan Project Botan: up to and including 1.11.21

Published 2017-04-10. Last modified 2026-06-17.