CVE-2023-51939

Опубликовано: 01 фев. 2024

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

An issue in the cp_bbs_sig function in relic/src/cp/relic_cp_bbs.c of Relic relic-toolkit 0.6.0 allows a remote attacker to obtain sensitive information and escalate privileges via the cp_bbs_sig function.

Ссылки

https://gist.github.com/liang-junkai/1b59487c0f7002fa5da98035b53e409f
Third Party Advisory
https://github.com/liang-junkai/Relic-bbs-fault-injection
Exploit
Mitigation
Patch
Third Party Advisory
https://github.com/relic-toolkit/relic/issues/284
Issue Tracking
Vendor Advisory
https://gist.github.com/liang-junkai/1b59487c0f7002fa5da98035b53e409f
Third Party Advisory
https://github.com/liang-junkai/Relic-bbs-fault-injection
Exploit
Mitigation
Patch
Third Party Advisory
https://github.com/relic-toolkit/relic/issues/284
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:relic_project:relic:0.6.0:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01272

Низкий

8.8 High

CVSS3

Дефекты

CWE-74

Связанные уязвимости

GHSA-pvg3-4m54-rhwj