Summary
Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-36328: Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2023 | libtommath | 0:1.2.0-62.amzn2023.0.1 |
| Amazon Linux · 2023 | libtommath-debuginfo | 0:1.2.0-62.amzn2023.0.1 |
| Amazon Linux · 2023 | libtommath-debugsource | 0:1.2.0-62.amzn2023.0.1 |
| Amazon Linux · 2023 | libtommath-devel | 0:1.2.0-62.amzn2023.0.1 |
| Amazon Linux · 2023 | libtommath-doc | 0:1.2.0-62.amzn2023.0.1 |
Vulnerabilities 1
-
Critical 9.8
Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, …
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2023-36328.html