CVE-2023-50981

Summary

CVE-2023-50981 is a denial-of-service vulnerability affecting ModularSquareRoot in Crypto++ (also known as cryptopp) up to version 8.9.0. Maliciously crafted DER public-key data associated with squared odd numbers, like the square of 268995137513890432434389773128616504853, can trigger an infinite loop and cause the affected system to crash or become unresponsive. An attacker could exploit this issue to cause a denial of service by sending a specially crafted public key to a vulnerable system. This vulnerability poses a significant risk to systems that rely on Crypto++ for encryption and decryption tasks. Organizations should update to the latest version of Crypto++ to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.