Lucene search
GoogleOSV:CVE-2023-32096HistoryMay 18, 2023 - 7:15 p.m.
CVE-2023-32096
2023-05-1819:15:09
Google
osv.dev
7
compiler
buffer clearing
sli_crypto_transparent_aead_encrypt_tag
silicon labs gecko platform sdk
key material duplication
ram
software
security vulnerability
cve-2023-32096
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
52.3%
Compiler removal of buffer clearing in
sli_crypto_transparent_aead_encrypt_tag
in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
Related
cve
cve
CVE-2023-32096
2023-05-18 19:15:09
prion
prion
Design/Logic Flaw
2023-05-18 19:15:00
cvelist
cvelist
CVE-2023-32096 Key duplication in GSDK
2023-05-18 18:45:08
nvd
nvd
CVE-2023-32096
2023-05-18 19:15:09
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
Low
EPSS
0.002
Percentile
52.3%
Related for OSV:CVE-2023-32096