CVE-2023-36328

Опубликовано: 01 сент. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).

Ссылки

https://github.com/libtom/libtommath/pull/546
Issue Tracking
Patch
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3H2PFUTBKQUDSOJXQQS7LUSZQWT3JTW2/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46GORAXZ34MHQNUGJBKS7PJ5NSMIAJGC/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ZUPWZGPFJ4JOI2NIP7YLRKZD5YXQTBK/
Mailing List
Third Party Advisory
https://github.com/libtom/libtommath/pull/546
Issue Tracking
Patch
https://lists.debian.org/debian-lts-announce/2024/09/msg00011.html
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3H2PFUTBKQUDSOJXQQS7LUSZQWT3JTW2/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46GORAXZ34MHQNUGJBKS7PJ5NSMIAJGC/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ZUPWZGPFJ4JOI2NIP7YLRKZD5YXQTBK/
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libtom:libtommath:*:*:*:*:*:*:*:*

Версия до 1.2.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

EPSS

Процентиль: 61%

0.00414

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2023-36328

CVSS3: 9.8

ubuntu

почти 2 года назад

Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).

CVE-2023-36328

CVSS3: 9.8

msrc

почти 2 года назад

Описание отсутствует

CVE-2023-36328

CVSS3: 9.8

debian

почти 2 года назад

Integer Overflow vulnerability in mp_grow in libtom libtommath before ...

GHSA-j3xv-6967-cv88

CVSS3: 9.8

github

почти 2 года назад

Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).

BDU:2023-06241

CVSS3: 9.8

fstec

почти 2 года назад

Уязвимость функции libtom библиотеки libtommath, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 61%

0.00414

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-190