CVE Catalog
CVE-2023-33613
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.30%
21th percentile - higher than 21% of all known CVEs
Summary
axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows attackers to cause a Denial of Service (DoS) when parsing a private key.
Risk Assessment
Organizations may experience service outages, which can lead to significant disruptions in operations.
Recommendation
It is recommended to update to the latest version of axTLS to mitigate this vulnerability and to monitor systems for unauthorized access attempts.
Original NVD description (English source)
axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows attackers to cause a Denial of Service (DoS) when parsing a private key.