relic vulnerabilities and fixes

Recent CVEs affecting relic, with upgrade or downgrade steps. 3 tracked.

relic has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-02-01. Highest priority: CVE-2023-36327 (score 54/100).

• CVE-2023-51939 HIGH 8.8 DOWNGRADE An issue in the cp_bbs_sig function in relic/src/cp/relic_cp_bbs.c of Relic relic-toolkit 0.6.0 allows a remot
• CVE-2023-36327 CRITICAL 9.8 UPGRADE Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attacke
• CVE-2023-36326 CRITICAL 9.8 UPGRADE Integer Overflow vulnerability in RELIC before commit 34580d840469361ba9b5f001361cad659687b9ab, allows attacke

FAQ

How do I fix relic vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is relic being exploited right now?

None of the tracked relic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which relic CVE should I patch first?

CVE-2023-36327 currently ranks highest (54/100): Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attacke.

RSS feed for relic · ← Back to latest CVEs