CVE-2023-1732

    Dashboard / Vulnerabilities / CVE-2023-1732

    CVE-2023-1732

    Published: 10 May 2023Last Modified: 12 Aug 2026

    Summary: Improper random reading in CIRCL

    Details: When sampling randomness for a shared secret, the implementation of Kyber and FrodoKEM, did not check whether crypto/rand.Read() returns an error. In rare deployment cases (error thrown by the Read() function), this could lead to a predictable shared secret. The tkn20 and blindrsa components did not check whether enough randomness was returned from the user provided randomness source. Typically the user provides crypto/rand.Reader, which in the vast majority of cases will always return the right number random bytes. In the cases where it does not, or the user provides a source that does not, the blinding for blindrsa is weak and integrity of the plaintext is not ensured in tkn20.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1732.json, https://github.com/cloudflare/circl/security/advisories/GHSA-2q89-485c-9j2x, https://nvd.nist.gov/vuln/detail/CVE-2023-1732, https://github.com/cloudflare/circl

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -3bef500f2b925f150815a360b90081021e082939

    Affected versions

    v1.3.2
    v1.3.1
    v1.3.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-1732 | CVE-DB