CVE-2023-36184

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Sep 8, 2023
Updated: Nov 7, 2023
CWE ID 787

Summary

CVE-2023-36184 is a stack overflow vulnerability affecting CMysten Labs Sui blockchain version 1.2.0. The issue lies within the /spec/openrpc.json component, which can be exploited to cause the system to exhaust its memory resources and crash. Attackers could potentially use this vulnerability to execute denial-of-service (DoS) attacks or gain unauthorized access to the affected system. Users are advised to upgrade to the latest version of the Sui blockchain software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share