vulnerability

Amazon Linux AMI 2: CVE-2023-36328: Security patch for libtommath (ALASANSIBLE2-2023-010)

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
2023-09-01
Added
2023-09-28
Modified
2025-01-28

Description

Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).

Solution(s)

amazon-linux-ami-2-upgrade-libtommathamazon-linux-ami-2-upgrade-libtommath-debuginfoamazon-linux-ami-2-upgrade-libtommath-devel
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.