CVE-2016-6879: Botan Project Botan

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

The X509_Certificate::allowed_usage function in botan 1.11.x before 1.11.31 might allow attackers to have unspecified impact by leveraging a call with more than one Key_Usage set in the enum value.

Affected products

• Botan Project Botan: version 1.11.0 only; version 1.11.1 only; version 1.11.2 only; version 1.11.3 only; version 1.11.4 only; version 1.11.5 only; …

Published 2017-04-10. Last modified 2026-06-17.