SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libcryptopp (SUSE-SU-2024:0030-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:0030-1 advisory. - CVE-2023-50980: Fixed DoS via malformed DER public key file bsc1218219. Tenable has extracted the...

SUSE-SU-2024:0030-1 Security update for libcryptopp

This update for libcryptopp fixes the following issues: - CVE-2023-50980: Fixed DoS via malformed DER public key file bsc1218219...

openSUSE 15 Security Update : libcryptopp (SUSE-SU-2023:4957-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4957-1 advisory. - CVE-2023-50980: Fixed DoS via malformed DER public key file bsc1218219. Tenable has extracted the preceding description block directly from the SUSE securi...

SUSE-SU-2023:4957-1 Security update for libcryptopp

This update for libcryptopp fixes the following issues: - CVE-2023-50980: Fixed DoS via malformed DER public key file bsc1218219...

CVE-2023-50980

gf2n.cpp in Crypto++ aka cryptopp through 8.9.0 allows attackers to cause a denial of service application crash via DER public-key data for an F2^m curve, if the degree of each term in the polynomial is not strictly decreasing...

CVE-2023-50980

CVE-2023-50980 affects Crypto++ (gf2n.cpp) up to version 8.9.0. The vulnerability allows a DoS (application crash) via DER-encoded public-key data for an F(2^m) curve when the polynomial term degrees are not strictly decreasing. Multiple advisories (OpenSUSE, SUSE, Astra Linux, Nessus references)...