Lucene search

[email protected]CVE-2023-52353

HistoryJan 21, 2024 - 11:15 p.m.

CVE-2023-52353

2024-01-2123:15:44

CWE-384

[email protected]

web.nvd.nist.gov

mbedtls

cve-2023-52353

security vulnerability

tls version

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.0005 Low

EPSS

Percentile

17.0%

JSON

An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.

CPENameOperatorVersion
arm:mbed_tlsarm mbed tlslt3.5.2
arm:mbed_tlsarm mbed tlseq1.3.19
arm:mbed_tlsarm mbed tlseq2.16.2
arm:mbed_tlsarm mbed tlseq2.20.0
arm:mbed_tlsarm mbed tlseq2.1.14
arm:mbed_tlsarm mbed tlseq2.7.5
arm:mbed_tlsarm mbed tlseq1.3.22
arm:mbed_tlsarm mbed tlseq2.7.18
arm:mbed_tlsarm mbed tlseq1.3.10
arm:mbed_tlsarm mbed tlseq2.6.1

CPE	Name	Operator	Version
arm:mbed_tls	arm mbed tls	lt	3.5.2
arm:mbed_tls	arm mbed tls	eq	1.3.19
arm:mbed_tls	arm mbed tls	eq	2.16.2
arm:mbed_tls	arm mbed tls	eq	2.20.0
arm:mbed_tls	arm mbed tls	eq	2.1.14
arm:mbed_tls	arm mbed tls	eq	2.7.5
arm:mbed_tls	arm mbed tls	eq	1.3.22
arm:mbed_tls	arm mbed tls	eq	2.7.18
arm:mbed_tls	arm mbed tls	eq	1.3.10
arm:mbed_tls	arm mbed tls	eq	2.6.1

Rows per page:

1-10 of 1271

References

github.com/Mbed-TLS/mbedtls/issues/8654

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.0005 Low

EPSS

Percentile

17.0%

JSON

Related for CVE-2023-52353

veracode1 debiancve1 cvelist1 ubuntucve1 osv1 prion1