CVE Vulnerabilities

CVE-2023-50981

Loop with Unreachable Exit Condition ('Infinite Loop')

Published: Dec 18, 2023 | Modified: Dec 27, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

ModularSquareRoot in Crypto++ (aka cryptopp) through 8.9.0 allows attackers to cause a denial of service (infinite loop) via crafted DER public-key data associated with squared odd numbers, such as the square of 268995137513890432434389773128616504853.

Weakness

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

Affected Software

Name Vendor Start Version End Version
Crypto++ Cryptopp * 8.9.0 (including)
Libcrypto++ Ubuntu bionic *
Libcrypto++ Ubuntu lunar *
Libcrypto++ Ubuntu mantic *
Libcrypto++ Ubuntu trusty *
Libcrypto++ Ubuntu xenial *

References