PT-2023-21920 · Unknown · Hyperscan Library

Dr. Martin Ettl · Published 2023-08-08 · Updated 2025-02-26 · CVE-2023-28711

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Hyperscan Library versions prior to 5.4.1

Description Insufficient control flow management in the Hyperscan Library may allow an authenticated user to potentially enable denial of service via local access.

Recommendations For versions prior to 5.4.1, update to version 5.4.1 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-670

CWE-691

Related Identifiers

BDU:2025-06201

CVE-2023-28711

OESA-2023-1609

Affected Products

Hyperscan Library

References · 10

• https://osv.dev/vulnerability/OESA-2023-1609 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28711 · Security Note
• https://bdu.fstec.ru/vul/2025-06201 · Security Note
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00879.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-28711 · Vendor Advisory
• https://t.me/cibsecurity/68274 · Telegram Post
• https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1609 · Note
• https://twitter.com/VulmonFeeds/status/1689878989077176320 · Twitter Post
• https://twitter.com/CVEnew/status/1690556490610888704 · Twitter Post
• https://twitter.com/attritionorg/status/1894859381407461517 · Twitter Post