CVE-2023-36328

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-36328
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-36328.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-36328
Downstream
AZL (5)
DEBIAN (1)
MGASA (1)
OESA (1)
openSUSE (1)
UBUNTU (1)
Related
Published
2023-09-01T00:00:00Z
Modified
2026-10-22T15:54:44Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36328.json"
}
References

Affected packages

Git / github.com/libtom/libtommath

Affected ranges

Type
GIT
Repo
https://github.com/libtom/libtommath
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
beba892bc0d4e4ded4d667ab1d2a94f4d75109a9
Database specific
Show details 
{
    "extracted_events": [
        {
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "beba892bc0d4e4ded4d667ab1d2a94f4d75109a9"
                }
            ],
            "source": "DESCRIPTION"
        },
        {
            "cpe": "cpe:2.3:a:libtom:libtommath:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "1.2.1"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

0.*
0.01
0.02
0.03
0.04
0.05
0.06
0.07
0.08
0.09
0.10
0.11
0.12
0.13
0.14
0.15
0.16
0.17
0.18
0.19
0.20
0.21
0.22
0.23
0.24
0.25
0.26
0.27
0.28
0.29
0.30
0.31
0.32
0.33
0.34
0.35
0.36
0.37
0.38
0.39
0.40
0.41
Other
semver
v0.*
v0.42.0
v0.43.0-rc0
v1.*
v1.0
v1.0-rc1
v1.0-rc2
v1.0.0-rc0
v1.0.1
v1.1.0
v1.2.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-36328.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "106050372364044130319841269537968530127",
                "138989511189435024913510828719328081916",
                "142380477373243677305882226931257945720"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-36328-0730dcd6",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_s_mp_mul_digs_fast.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "225216109726205029503992178625684152054",
            "length": 982
        },
        "id": "CVE-2023-36328-15108062",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_mp_mul_2d.c",
            "function": "mp_mul_2d"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "68339563970944342301308654008528456554",
                "43157521942018007803000220711083476250",
                "38339990058361224613541228773260280803"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-36328-15113f8c",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_s_mp_mul_digs.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "7464043394577942921018390111865437443",
            "length": 418
        },
        "id": "CVE-2023-36328-2cb10174",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_mp_grow.c",
            "function": "mp_grow"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "311150556130048010525611840387376630479",
                "94384170302681049117350950298130054021",
                "112081898176579185635372122023793920146"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-36328-55682065",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_s_mp_mul_high_digs.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "335923359280651725358079529009462510851",
                "25554941091880674596326844517494098846",
                "220818104302534498800882670636355785464"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-36328-58cb0885",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_s_mp_mul_high_digs_fast.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "36942782451956605979786643737339826680",
            "length": 1016
        },
        "id": "CVE-2023-36328-5f340a60",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_s_mp_mul_high_digs_fast.c",
            "function": "s_mp_mul_high_digs_fast"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "203573659158013216355604980450937617752",
                "33853885718554895389068497958532053499",
                "274033771747462254199058202122855894983"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-36328-633c872e",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_mp_2expt.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "90272289856612299484943472192972871174",
            "length": 1100
        },
        "id": "CVE-2023-36328-6e52bfe4",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_s_mp_mul_high_digs.c",
            "function": "s_mp_mul_high_digs"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "32864084733047015121195245552679558485",
            "length": 304
        },
        "id": "CVE-2023-36328-a16b6a7e",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_mp_init_size.c",
            "function": "mp_init_size"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "45127785024479975027238385917272418688",
            "length": 993
        },
        "id": "CVE-2023-36328-a470da98",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_s_mp_mul_digs_fast.c",
            "function": "s_mp_mul_digs_fast"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "168464538831800791156368947787361190681",
                "332394514846102728435436048479189068189",
                "322660424397950309489111685006193349624",
                "205268584447163253538889661806519713870"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-36328-a7830d8e",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_mp_init_size.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "20381689368353569664544963509206456137",
                "286452174068394204286456965823745341495",
                "144778904194859830232812730396684170772"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-36328-ac38b6ce",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_mp_grow.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "171270495675007812244105834486604787084",
            "length": 994
        },
        "id": "CVE-2023-36328-c43cd45d",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_s_mp_mul_digs.c",
            "function": "s_mp_mul_digs"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "137688904135429290983877498058625057875",
                "81244885810368557603114194810633034773",
                "39624392898385286610133124407587622096"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2023-36328-de0ffcf5",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_mp_mul_2d.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "240351910115041180895438572771692088249",
            "length": 333
        },
        "id": "CVE-2023-36328-f4048750",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/libtom/libtommath/commit/beba892bc0d4e4ded4d667ab1d2a94f4d75109a9",
        "target": {
            "file": "bn_mp_2expt.c",
            "function": "mp_2expt"
        }
    }
]
vanir_signatures_modified 
"2026-10-22T15:54:44Z"