CVE-2023-32690

libspdm is a sample implementation that follows the DMTF SPDM specifications. Prior to versions 2.3.3 and 3.0, following a successful CAPABILITIES response, a libspdm Requester stores the Responder's CTExponent into its context without validation. If the Requester sends a request message that requires a cryptography operation by the Responder, such as CHALLENGE, libspdm will calculate the timeout value using the Responder's unvalidated CTExponent. A patch is available in version 2.3.3. A workaround is also available. After completion of VCA, the Requester can check the value of the Responder's CTExponent. If it greater than or equal to 64, then the Requester can stop communication with the Responder.

• CWE-20

• https://github.com/DMTF/libspdm/issues/2068Patch
• https://github.com/DMTF/libspdm/pull/2069Patch
• https://github.com/DMTF/libspdm/security/advisories/GHSA-56h8-4gv5-jf2cVendor Advisory
• https://github.com/DMTF/libspdm/issues/2068Patch
• https://github.com/DMTF/libspdm/pull/2069Patch
• https://github.com/DMTF/libspdm/security/advisories/GHSA-56h8-4gv5-jf2cVendor Advisory

Published

Jun 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-32685Kanboard is project management software that focuses on the …5.4
• CVE-2023-32686Kiwi TCMS is an open source test management system for both …5.4
• CVE-2023-32687tgstation-server is a toolset to manage production BYOND ser…6.5
• CVE-2023-32688parse-server-push-adapter is the official Push Notification …7.5
• CVE-2023-32689Parse Server is an open source backend that can be deployed …6.5
• CVE-2023-3269A vulnerability exists in the memory management subsystem of…7.8
• CVE-2023-32691gost (GO Simple Tunnel) is a simple tunnel written in golang…5.9
• CVE-2023-32692CodeIgniter is a PHP full-stack web framework. This vulnerab…9.8
• CVE-2023-32693Decidim is a participatory democracy framework, written in R…6.1
• CVE-2023-32694Saleor Core is a composable, headless commerce API. Saleor's…5.4
• CVE-2023-32695socket.io parser is a socket.io encoder and decoder written …7.5
• CVE-2023-32696CKAN is an open-source data management system for powering d…8.8