Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 913880 (CVE-2023-36328) - <dev-libs/libtommath-1.2.1: Integer overflow
Summary: <dev-libs/libtommath-1.2.1: Integer overflow
Alias: CVE-2023-36328
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
Whiteboard: B3 [cleanup glsa?]
Depends on: 915352
  Show dependency tree
Reported: 2023-09-09 04:59 UTC by Sam James
Modified: 2023-10-09 06:02 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-09-09 04:59:07 UTC
Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS).
Comment 1 Larry the Git Cow gentoo-dev 2023-09-09 05:03:46 UTC
The bug has been referenced in the following commit(s):

commit 9e4b7c3ada9725aa4cf21c16d6fac8fa985e4b2f
Author:     Sam James <>
AuthorDate: 2023-09-09 04:57:54 +0000
Commit:     Sam James <>
CommitDate: 2023-09-09 04:59:22 +0000

    dev-libs/libtommath: add 1.2.1
    Signed-off-by: Sam James <>

 dev-libs/libtommath/Manifest                |  1 +
 dev-libs/libtommath/libtommath-1.2.1.ebuild | 96 +++++++++++++++++++++++++++++
 2 files changed, 97 insertions(+)