CVE-2023-50781

A flaw was found in m2crypto. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which may lead to exposure of confidential or sensitive data.

Published: Feb 5, 2024
Updated: May 4, 2025
CVE: CVE-2023-50781
GHSA: GHSA-944j-8ch6-rf6x
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWEs:

CWE-203
CWE-208

Affected Software
References

Software	From	Fixed in
m2crypto	-	0.40.1.x
redhat / enterprise_linux	8.0	8.0.x
redhat / enterprise_linux	9.0	9.0.x
redhat / update_infrastructure	4	4.x

https://access.redhat.com/security/cve/CVE-2023-50781
https://bugzilla.redhat.com/show_bug.cgi?id=2254426
https://gitlab.com/m2crypto/m2crypto/-/issues/342

Vulnerability Database

289,599

CVE-2023-50781