Lucene search
Alpine Linux Development TeamALPINE:CVE-2024-23775HistoryJan 31, 2024 - 8:15 a.m.
CVE-2024-23775
2024-01-3108:15:42
Alpine Linux Development Team
security.alpinelinux.org
10
vulnerability
mbed tls
denial of service
mbedtls_x509_set_extension
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
21.2%
Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mbedtls_x509_set_extension().
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | mbedtls2 | < 2.28.7-r0 | UNKNOWN |
| Alpine | edge-main | noarch | mbedtls | < 2.28.7-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | mbedtls | < 2.28.7-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | mbedtls | < 2.28.7-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | mbedtls | < 2.28.7-r0 | UNKNOWN |
| Alpine | 3.19-main | noarch | mbedtls | < 2.28.7-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | mbedtls2 | < 2.28.7-r0 | UNKNOWN |
| Alpine | 3.20-main | noarch | mbedtls | < 2.28.7-r0 | UNKNOWN |
Related
cvelist
cvelist
CVE-2024-23775
2024-01-31 00:00:00
ubuntucve
ubuntucve
CVE-2024-23775
2024-01-31 00:00:00
cve
cve
CVE-2024-23775
2024-01-31 08:15:42
debiancve
debiancve
CVE-2024-23775
2024-01-31 08:15:42
osv
osv
CVE-2024-23775
2024-01-31 08:15:42
prion
prion
Integer overflow
2024-01-31 08:15:00
veracode
veracode
Integer Overflow
2024-01-30 16:41:08
nvd
nvd
CVE-2024-23775
2024-01-31 08:15:42
openvas
openvas
Fedora: Security Advisory for mbedtls (FEDORA-2024-c7f1c839ac)
2024-02-23 00:00:00
Fedora: Security Advisory (FEDORA-2024-bfd98be425)
2024-02-17 00:00:00
nessus
nessus
Fedora 39 : mbedtls (2024-bfd98be425)
2024-02-17 00:00:00
Fedora 38 : mbedtls (2024-c7f1c839ac)
2024-02-22 00:00:00
GLSA-202409-14 : Mbed TLS: Multiple Vulnerabilities
2024-09-22 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: mbedtls-2.28.7-1.fc39
2024-02-17 00:57:59
[SECURITY] Fedora 38 Update: mbedtls-2.28.7-1.fc38
2024-02-22 02:24:58
redos
redos
ROS-20240503-04
2024-05-03 00:00:00
gentoo
gentoo
Mbed TLS: Multiple Vulnerabilities
2024-09-22 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.3
Confidence
High
EPSS
0.001
Percentile
21.2%
Related for ALPINE:CVE-2024-23775