Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6402-2
HistoryNov 27, 2023 - 12:00 a.m.

LibTomMath vulnerability

2023-11-2700:00:00
ubuntu.com
17
libtommath
ubuntu 23.10
development files
arbitrary code
denial of service

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.001

Percentile

50.2%

JSON

Releases

  • Ubuntu 23.10

Packages

  • libtommath - multiple-precision integer library [development files]

Details

USN-6402-1 fixed vulnerabilities in LibTomMath. This update
provides the corresponding updates for Ubuntu 23.10.

Original advisory details:

It was discovered that LibTomMath incorrectly handled certain inputs.
An attacker could possibly use this issue to execute arbitrary code
and cause a denial of service (DoS).

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchlibtommath1< 1.2.0-6ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchlibtommath-dev< 1.2.0-6ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchlibtommath-doc< 1.2.0-6ubuntu0.23.10.1UNKNOWN
Ubuntu23.10noarchlibtommath1-dbgsym< 1.2.0-6ubuntu0.23.10.1UNKNOWN

Related

fedora 3
nessus 24
osv 4
cbl_mariner 4
openvas 21
mageia 1
cvelist 1
debiancve 1
prion 1
ubuntucve 1
ubuntu 1
veracode 1
redos 1
cve 1
nvd 1
fedora
fedora
[SECURITY] Fedora 37 Update: libtommath-1.2.0-11.fc37
2023-09-18 01:37:38
[SECURITY] Fedora 39 Update: libtommath-1.2.0-13.fc39
2023-09-18 00:16:36
[SECURITY] Fedora 38 Update: libtommath-1.2.0-12.fc38
2023-09-05 00:42:03
nessus
nessus
Amazon Linux 2023 : libtommath, libtommath-devel (ALAS2023-2023-370)
2023-10-03 00:00:00
EulerOS Virtualization 3.0.6.0 : libtommath (EulerOS-SA-2024-1688)
2024-05-17 00:00:00
Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 : LibTomMath vulnerability (USN-6402-1)
2023-10-02 00:00:00
osv
osv
CVE-2023-36328
2023-09-01 16:15:08
libtommath vulnerability
2023-11-27 15:59:49
libtommath vulnerability
2023-10-02 14:27:58
cbl_mariner
cbl_mariner
CVE-2023-36328 affecting package tcl for versions less than 8.6.13-3
2024-03-19 17:21:46
CVE-2023-36328 affecting package libtommath for versions less than 1.1.0-5
2024-04-03 00:40:51
CVE-2023-36328 affecting package tcl for versions less than 8.6.13-2
2023-09-27 18:02:50
openvas
openvas
Fedora: Security Advisory for libtommath (FEDORA-2023-f5680e3b4b)
2023-09-19 00:00:00
Huawei EulerOS: Security Advisory for libtommath (EulerOS-SA-2023-3185)
2023-11-10 00:00:00
Huawei EulerOS: Security Advisory for libtommath (EulerOS-SA-2024-1278)
2024-03-12 00:00:00
mageia
mageia
Updated libtommath packages fix security vulnerability
2023-09-25 01:16:18
cvelist
cvelist
CVE-2023-36328
2023-09-01 00:00:00
debiancve
debiancve
CVE-2023-36328
2023-09-01 16:15:08
prion
prion
Integer overflow
2023-09-01 16:15:00
ubuntucve
ubuntucve
CVE-2023-36328
2023-09-01 00:00:00
ubuntu
ubuntu
LibTomMath vulnerability
2023-10-02 00:00:00
veracode
veracode
Integer Overflow
2023-10-10 04:44:38
redos
redos
ROS-20231023-01
2023-10-23 00:00:00
cve
cve
CVE-2023-36328
2023-09-01 16:15:08
nvd
nvd
CVE-2023-36328
2023-09-01 16:15:08

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.001

Percentile

50.2%

JSON
Related for USN-6402-2
fedora3nessus24osv4cbl_mariner4openvas21mageia1cvelist1debiancve1prion1ubuntucve1ubuntu1veracode1redos1cve1nvd1