Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2023-36184: CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.

48
This month
HIGH 7.5REMOTEUPGRADEMITIGATEUPGRADE

CVE-2023-36184 is a high-severity flaw (CVSS 7.5) affecting aptos, move, sui. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json.

Why this priority

  • High severity
  • Remotely exploitable, no login, no user action

A fixed release or distro patch exists.

Risk facts

CVSS score7.5 (High)
Attack vectorNetwork (remote)
Attack complexityLow
Privileges neededNone
User interactionNone
EPSS exploit chance1.1% (top 34%)
CISA exploited listNo
WeaknessCWE-787
Published2023-09-08
Last modified2026-06-17
Publisher (CNA): MITRE · Vendor: aptosfoundation · move project · mystenlabs

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

aptosfoundation aptos UPGRADE
Affected: < 1.4.3
Fixed in: 1.4.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy aptos || rpm -q aptos || aptos --version
2. UPGRADE to 1.4.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade aptos
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade aptos
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
move project move MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy move || rpm -q move || move --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
mystenlabs sui UPGRADE
Affected: < 1.2.1
Fixed in: 1.2.1
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy sui || rpm -q sui || sui --version
2. UPGRADE to 1.2.1 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade sui
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade sui
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-36184?

aptos: upgrade to 1.4.3; move: mitigate or apply the listed mitigation; sui: upgrade to 1.2.1. Exact commands for each OS are on this page.

Is CVE-2023-36184 being exploited?

CVE-2023-36184 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-36184 affect?

CVE-2023-36184 affects aptos, move, sui. Severity is high (CVSS 7.5). CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json.

How urgent is CVE-2023-36184?

Priority 48/100. High severity; Remotely exploitable, no login, no user action

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.