Security Update for libtommath
Summary
DLA-3857-1: libtommath - security update. Affects libtommath versions < 1.2.0-6+deb11u1. Fixed in 1.2.0-6+deb11u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libtommath is a library that provides multiple-precision integer arithmetic operations. It is commonly used in cryptographic applications and other software that requires precise mathematical calculations. The library is widely used in the Debian 11 ecosystem.
Vulnerability Detail
A security vulnerability (CVE-2023-36328) has been discovered in libtommath. This vulnerability allows an attacker to execute arbitrary code or cause a denial of service by exploiting a flaw in the library's handling of certain inputs. The vulnerability was introduced in version 0 of the package and has been fixed in version 1.2.0-6+deb11u1.
How To Fix
Minimum fixed version
1.2.0-6+deb11u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libtommathTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update the package to the fixed version as soon as possible.
Conclusion
libtommath has been found to have a security vulnerability (CVE-2023-36328) that allows arbitrary code execution or denial of service. It is crucial to update the package to version 1.2.0-6+deb11u1 or later to mitigate the risk. No known workarounds are available for this vulnerability.
See every vulnerability recorded for libtommath →
FAQ
libtommath is a library that provides multiple-precision integer arithmetic operations. It is commonly used in cryptographic applications and other software that requires precise mathematical calculations.
This vulnerability allows an attacker to execute arbitrary code or cause a denial of service by exploiting a flaw in the library's handling of certain inputs.
To fix this vulnerability, update libtommath to version 1.2.0-6+deb11u1 or later. This can be done by running the package manager update command or by manually installing the updated package from the official Debian repository.
There is no known workaround for this vulnerability. It is crucial to update the package to the fixed version as soon as possible.
You can find more information about this vulnerability in the Debian Security Advisory DLA-3857-1.
Related vulnerabilities
Recent vulnerabilities recorded for libtommath.
