CVE-2023-36327
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
CVE-2023-36327 describes an integer overflow vulnerability in the RELIC library before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allowing attackers to execute arbitrary code and cause a denial of service in the pos argument of the bn_get_prime function.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the system or disrupt its operation, potentially leading to serious consequences for the organization.
Recommendation
It is recommended to update the RELIC library to a version that includes the fix after commit 421f2e91cf2ba42473d4d54daf24e295679e290e to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bn_get_prime function.