PT-2023-19708 · Rambus · Rambus Tls Toolkit

Published 2023-12-22 · Updated 2024-01-03 · CVE-2023-24609

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Matrix SSL versions 4.x through 4.6.0 Rambus TLS Toolkit (affected versions not specified)

Description The issue is related to a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server. This can cause an attacked device to calculate an SHA-2 hash over at least 65 KB in RAM. With a large number of crafted TLS messages, the CPU becomes heavily loaded. The functions tls13VerifyBinder and tls13TranscriptHashUpdate are involved in this process.

Recommendations For Matrix SSL versions 4.x through 4.6.0, consider disabling the TLS 1.3 server functionality until a patch is available. For Rambus TLS Toolkit, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2023-24609

Affected Products

Rambus Tls Toolkit

References · 6

• 🔥 https://telekom.com/en/company/data-privacy-and-security/news/advisories-504842 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-24609 · Security Note
• https://osv.dev/vulnerability/CVE-2023-24609 · Vendor Advisory
• https://rambus.com/security/software-protocols/tls-toolkit · Note
• https://t.me/cvenotify/66108 · Telegram Post
• https://t.me/cvenotify/64835 · Telegram Post