Heap Buffer Overflow in axTLS v2.1.5's bi_import Function Leads to Denial of Service (DoS)

Heap Buffer Overflow in axTLS v2.1.5's bi_import Function Leads to Denial of Service (DoS)

CVE-2023-33613 · MEDIUM Severity

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

axTLS v2.1.5 was discovered to contain a heap buffer overflow in the bi_import function in axtls-code/crypto/bigint.c. This vulnerability allows attackers to cause a Denial of Service (DoS) when parsing a private key.

Learn more about our Web Application Penetration Testing UK.