CVE-2023-36327
Critical
Description
Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bn_get_prime function.
SeverityCritical
CVSS9.8
Exploit probability—
ProductRelic
PublishedSep 1, 2023
First seenSep 1, 2023
How to fix
Update
- relic_project relic2022-11-14 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| relic_project relic | v < 2022-11-14 | 2022-11-14 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.