Remote Decryption Flaw in TLS Servers May Lead to Data Exposure
CVE-2023-50781

7.5HIGH

Key Information:

Status
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
5 February 2024

What is CVE-2023-50781?

A vulnerability has been identified in the M2Crypto library that affects the security of TLS servers utilizing RSA key exchanges. This flaw could allow a remote attacker to decrypt messages that have been captured during transmission. The exposure of such decrypted data raises serious concerns regarding the potential compromise of confidential or sensitive information. Organizations using M2Crypto should take immediate action to ensure they are using updated versions to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://access.redhat.com/security/cve/CVE-2023-50781
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2254426
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Hubert Kario (Red Hat).
JSON
.