Name: CVE-2022-43705: Improper Certificate Validation
Creator: Rapid7
Published: 2022-11-27T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-43705, CWE-295, CVSS 9.1, EPSS 0.0046

In Botan before 2.19.3, it is possible to forge OCSP responses due to a certificate verification error. This issue was introduced in Botan 1.11.34 (November 2016).

CVSS Details

CVSS 3.1 Base Score: 9.1
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade botan	Mar 21, 2024	Nov 27, 2022
Debian	—	Upgrade botan	Jul 30, 2024	Nov 27, 2022
Suse	—	Upgrade libbotan-2-18-32bitUpgrade botan-docUpgrade libbotan-2-10-32bitUpgrade python3-botanUpgrade libbotan-2-18-64bitUpgrade botanUpgrade libbotan-devel-64bitUpgrade libbotan-2-10-64bitUpgrade libbotan-2-10Upgrade libbotan-devel-32bitUpgrade libbotan-2-18Upgrade libbotan-devel	Nov 24, 2022	Nov 23, 2022
Ubuntu	—	No solution exists	Jun 26, 2025	Nov 27, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence