Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Zach Wilson

#37258of 60,401
7.8Total CVSS
Vulnerabilities · 1
PT-2023-5255
2023-09-08
7.8
CVE-2023-4807
Openssl
Openssl
The POLY1305 MAC implementation in OpenSSL contains a bug that might corrupt the internal state of applications on the Windows 64 platform when running on newer X86 64 processors supporting the AVX512-IFMA instructions. If an attacker can influence whether the POLY1305 MAC algorithm is used, the application state might be corrupted with various application-dependent consequences. The consequences of this kind of internal application state corruption can be various, from no consequences to the worst consequences, where the attacker could get complete control of the application process. However, given the contents of the registers are just zeroized, the most likely consequence would be an incorrect result of some application-dependent calculations or a crash leading to a denial of service.