UBUNTU-CVE-2023-36328

Details

Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).

Affected Packages

Ubuntu:Pro:16.04:LTSlibtommath

Affected versions:

0.42.0-1.2

Fixed in:

0.42.0-1.2ubuntu0.1~esm1

Ubuntu:Pro:18.04:LTSlibtommath

Affected versions:

1.0-41.0.1-1

Fixed in:

1.0.1-1ubuntu0.1~esm1

Ubuntu:20.04:LTSlibtommath

Affected versions:

1.1.0-31.2.0-11.2.0-21.2.0-3

Fixed in:

1.2.0-3ubuntu0.1

Ubuntu:22.04:LTSlibtommath

Affected versions:

1.2.0-6build11.2.0-6build21.2.0-6build3

Fixed in:

1.2.0-6ubuntu0.22.04.1

Ubuntu:16.04:LTSlibtommath

Affected versions:

0.42.0-1.2

Ubuntu:18.04:LTSlibtommath

Affected versions:

1.0-41.0.1-1

References

REPORThttps://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9 REPORThttps://github.com/libtom/libtommath/pull/546 REPORThttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3H2PFUTBKQUDSOJXQQS7LUSZQWT3JTW2/REPORThttps://ubuntu.com/security/CVE-2023-36328 REPORThttps://ubuntu.com/security/notices/USN-6402-1 REPORThttps://ubuntu.com/security/notices/USN-6402-2 REPORThttps://www.cve.org/CVERecord?id=CVE-2023-36328

UBUNTU-CVE-2023-36328

Details

Affected Packages

References

CVSS Analysis

Related

Ecosystems

Timeline