system
Describe <CVE-2016-2850>.
user
What is <CVE-2016-2850>?
assistant
Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors..