{"id":"CVE-2023-36327","details":"Integer Overflow vulnerability in RELIC before commit 421f2e91cf2ba42473d4d54daf24e295679e290e, allows attackers to execute arbitrary code and cause a denial of service in pos argument in bn_get_prime function.","modified":"2026-08-12T14:50:48.360742Z","published":"2023-09-01T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36327.json"},"references":[{"type":"WEB","url":"https://groups.google.com/g/relic-discuss/c/A_J2-ArVIAo/m/qgFiXsUJBQAJ?utm_medium=email&utm_source=footer"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/36xxx/CVE-2023-36327.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36327"},{"type":"FIX","url":"https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/relic-toolkit/relic","events":[{"introduced":"0"},{"fixed":"421f2e91cf2ba42473d4d54daf24e295679e290e"}],"database_specific":{"source":"REFERENCES"}}],"versions":["0.6.0","relic-toolkit-0.5.0","relic-toolkit-0.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-36327.json","vanir_signatures_modified":"2026-08-12T14:50:48Z","vanir_signatures":[{"id":"CVE-2023-36327-021e3712","signature_type":"Line","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e","target":{"file":"include/relic_bn.h"},"deprecated":false,"digest":{"line_hashes":["198541175929715158198710043838568319794","219748013954143964858498237208146625470","98731530914174092748226320672181472542","38845636090477406116475567403353319277"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["156253243738575784851652964876728093615","144332720998186384372573746011035442046","16179430887366667933556806564245285973","17455384671793139616432641182472941064","110349309467091730040224459267953843436","221260760224870654452578867925083745398","200602063799490910143497005794063549309","236738401112146690557475938776952109733","288577125418409658335395651022500798073","156023480858223409364024062982506080776","93193126157934946346721265910237954512","32646701537210815139385587008044896245","280251113815244769662684999744241837500","156023480858223409364024062982506080776","93193126157934946346721265910237954512","78482176009135560320090148471617595336","192081864379329503251452417168848750867","244883407288725208092408984535813748741","239832929385000024788208043686996929834","131376359241038670704447598941282008290","28268289052302217789941414164355941570","66339246285478837400857056156974607815","253282315312209988272229218147557353822","297480250703280253902315113368945242742","9355507682214275464943289804227795623","289769448815275762225938236837455281786","251783289678429482516032532500217699196","336722060174354490250142178194234109239","56942020547254620730350025738415718221","147253038976772816813233701881367551837","95389818154431523337342896860202716537","293738030930487941876622340571030623641","7711795496348197922394491608390615209","285155268728512726196562556027964436600","164843136412405031662253197115435012420","296826451489167759707997983488642586568","45016356887887314028498609742839012444","123362228521052588198712941576830110953","56117786691662889913203118683996579783","228325506662951071800381399022821575943","81401767075730113851147061496444438062","71958027150985447729869623335224647507","97871165643144812171922568761286262574","192626699017398888457529508021726055777","106982098782687532941836375964474331592","236649620279620137790933938101933562036","20566125861442655626139775574408182306","73545778378958978892074203117340881477","45855532156775078585433098712790823651","230578921665980595504864099741565858717","86446450507496900370527098108411535092","315881209342262582642674933517420324700","193319608100792384359679986795762198467","207184232652424387812017650725624158074","111056715780215817630876526197387364762","211786412798278087332686929557513489776","313547880442067802614290304887442047689","277223508765908606275827913777905148740","141111455526626614176975115289285544585","133577592327360284247183757702044619267"],"threshold":0.9},"id":"CVE-2023-36327-0724064e","signature_type":"Line","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e","target":{"file":"test/test_cp.c"}},{"deprecated":false,"digest":{"line_hashes":["242563468774773266375555895667429673314","213495425077931525255417534734761444303","237698865564528360197575492690699899598","115823439270366389961589732934783485513","280034454355597829439323425978743326899","96843488351817931602362974402964297438","329970185964278979282532703512905347662","177770608911297649810356270357568561651","88252879989292249458083166519120746942"],"threshold":0.9},"id":"CVE-2023-36327-08258857","signature_type":"Line","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e","target":{"file":"src/bn/relic_bn_prime.c"}},{"target":{"function":"benaloh","file":"test/test_cp.c"},"deprecated":false,"digest":{"function_hash":"269660226622708624228258327128312303872","length":1634},"id":"CVE-2023-36327-2d99e141","signature_type":"Function","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e","target":{"file":"src/bn/relic_bn_prime.c","function":"bn_get_prime"},"deprecated":false,"digest":{"function_hash":"43575137905543784777756221616105262794","length":103},"id":"CVE-2023-36327-340b79cf"},{"signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e","target":{"file":"test/test_cp.c","function":"main"},"deprecated":false,"digest":{"function_hash":"44067792831753975686694892640423407932","length":2480},"id":"CVE-2023-36327-67f6a2e0","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e","target":{"file":"include/relic_label.h"},"deprecated":false,"digest":{"line_hashes":["207587998733504629218551119098450578020","10045143565161841965555648962197580364","197406993804099552993174806034831589289","20280989668712731362133881748161777403","69876221775294110759358704826052825881","247962426008312847394603327157739043856","225250546380866163512520204909198202471"],"threshold":0.9},"id":"CVE-2023-36327-7ab51529"},{"digest":{"function_hash":"298342101495137059984521799434065336329","length":4126},"id":"CVE-2023-36327-d3b52fbe","signature_type":"Function","signature_version":"v1","source":"https://github.com/relic-toolkit/relic/commit/421f2e91cf2ba42473d4d54daf24e295679e290e","target":{"file":"test/test_cp.c","function":"psi"},"deprecated":false}]}}],"schema_version":"1.9.0"}