• caglararli@hotmail.com
  • 05386281520

CVE-2023-24609 | Matrix SSL/Rambus TLS Toolkit Client Hello Pre-Shared Key Extension Parser tls13VerifyBinder/tls13TranscriptHashUpdate integer overflow

Çağlar Arlı      -    25 Views

CVE-2023-24609 | Matrix SSL/Rambus TLS Toolkit Client Hello Pre-Shared Key Extension Parser tls13VerifyBinder/tls13TranscriptHashUpdate integer overflow

A vulnerability has been found in Matrix SSL and Rambus TLS Toolkit and classified as problematic. Affected by this vulnerability is the function tls13VerifyBinder/tls13TranscriptHashUpdate of the component Client Hello Pre-Shared Key Extension Parser. The manipulation leads to integer overflow. This vulnerability is known as CVE-2023-24609. Access to the local network is required for this attack. There is no exploit available.