1307 matches found
CVE-2024-23744
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions...
CVE-2023-52353
An issue was discovered in Mbed TLS through 3.5.1. In mbedtlssslsessionreset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum...
CVE-2023-52353: Session Fixation
An issue was discovered in Mbed TLS through 3.5.1. In mbedtlssslsessionreset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum...
PT-2024-20052 · Mbed Tls +1 · Mbed Tls +1
Name of the Vulnerable Software and Affected Versions: Mbed TLS version 3.5.1 Description: An issue was discovered in Mbed TLS where there is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions. Recommendations: For Mbed TLS version 3.5.1, consider updating to a...
CVE-2023-52353
An issue was discovered in Mbed TLS through 3.5.1. In mbedtlssslsessionreset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum...
CVE-2024-23744
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions...
CVE-2024-23744
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions...
CVE-2024-23744: Uncontrolled Resource Consumption
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions...
CVE-2024-23744
The CVE-2024-23744 entry concerns Mbed TLS 3.5.1. The issue is a persistent handshake denial when a client sends a TLS 1.3 ClientHello without extensions, which can impact availability. The connected Astra Linux bulletin repeats this description, confirming the same root cause. No remediation or ...
CVE-2024-23744
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions...
CVE-2023-52353
An issue was discovered in Mbed TLS through 3.5.1. In mbedtlssslsessionreset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum...
PT-2024-1658
Name of the Vulnerable Software and Affected Versions Mbed TLS versions 2.x before 2.28.7 Mbed TLS versions 3.x before 3.5.2 Description A timing side channel in RSA private operations could allow a local attacker to recover the plaintext by sending a large number of messages for decryption, as...
PT-2024-1659
Name of the Vulnerable Software and Affected Versions Mbed TLS versions 2.x through 2.28.6 Mbed TLS versions 3.x through 3.5.1 Description The issue is related to an integer overflow vulnerability in the mbedtls x509 set extension function, which can be exploited by attackers to cause a denial of...
Fedora 39 : mbedtls (2023-0352951853)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0352951853 advisory. - Update to 2.28.5 - CVE-2023-43615 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.5 Security Advisory:...
Buffer Overread
Mbed TLS is vulnerable to Buffer Overread. The vulnerability is due to improper validation of record lengths when calculating the MAC. This can potentially leak sensitive data or crash the application...
SUSE CVE-2023-43615
Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow...
SUSE CVE-2023-45199
Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution...
CVE-2023-43615
Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow...
