HIGH🇬🇧 English

CVE-2023-50981

CVSS 7.5v3.1pub. 2023-12-18upd. 2025-05-07

ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Cryptopp Crypto\+\+

    APP
    Cryptopp
    ≤ 8.9.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
DoS
CWE
Referencje

Powiązane podatności

CVE-2023-50980HIGH7.5ten sam produkt

gf2n.cpp in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (application c...

CVE-2022-48570HIGH7.5ten sam produkt

Crypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocator...

CVE-2016-3995HIGH7.5ten sam produkt

The timing attack protection in Rijndael::Enc::ProcessAndXorBlock and Rijndael::Dec::ProcessAndXorBlock in Cry...

CVE-2016-7544HIGH7.5ten sam produkt

Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The library will reques...

CVE-2016-9939HIGH7.5ten sam produkt

Crypto++ (aka cryptopp and libcrypto++) 5.6.4 contained a bug in its ASN.1 BER decoding routine. The library w...