PT-2024-20052 · Mbed Tls +1 · Mbed Tls +1

Name of the Vulnerable Software and Affected Versions: Mbed TLS version 3.5.1 Description: An issue was discovered in Mbed TLS where there is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions. Recommendations: For Mbed TLS version 3.5.1, consider updating to a...

Mbed TLS Security Vulnerability

Mbed TLS is an open source, portable, easy to use, readable and flexible SSL library. A security vulnerability exists in Mbed TLS version 3.5.1. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2023-52353

An issue was discovered in Mbed TLS through 3.5.1. In mbedtlssslsessionreset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum...

PT-2024-14545 · Mbed Tls +1 · Mbed Tls +1

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions through 3.5.1 Description: An issue was discovered in the mbedtls ssl session reset function, where the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes t...

CVE-2024-23744

An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions...

CVE-2024-23744

An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions...

CVE-2024-23744

The CVE-2024-23744 entry concerns Mbed TLS 3.5.1. The issue is a persistent handshake denial when a client sends a TLS 1.3 ClientHello without extensions, which can impact availability. The connected Astra Linux bulletin repeats this description, confirming the same root cause. No remediation or ...

CVE-2023-52353

An issue was discovered in Mbed TLS through 3.5.1. In mbedtlssslsessionreset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum...

CVE-2024-23744

An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions...

PT-2024-1658 · Mbed Tls +3 · Mbed Tls +3

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions 2.x before 2.28.7 Mbed TLS versions 3.x before 3.5.2 Description: A timing side channel in RSA private operations could allow a local attacker to recover the plaintext by sending a large number of messages for decryption, as...

PT-2024-1659

Name of the Vulnerable Software and Affected Versions Mbed TLS versions 2.x through 2.28.6 Mbed TLS versions 3.x through 3.5.1 Description The issue is related to an integer overflow vulnerability in the mbedtls x509 set extension function, which can be exploited by attackers to cause a denial of...

Fedora 39 : mbedtls (2023-0352951853)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-0352951853 advisory. - Update to 2.28.5 - CVE-2023-43615 Release notes: https://github.com/Mbed-TLS/mbedtls/releases/tag/mbedtls-2.28.5 Security Advisory:...

Buffer Overread

Mbed TLS is vulnerable to Buffer Overread. The vulnerability is due to improper validation of record lengths when calculating the MAC. This can potentially leak sensitive data or crash the application...

SUSE CVE-2023-43615

Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow...

SUSE CVE-2023-45199

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution...

The vulnerability of the Mbed TLS software lies in errors during encryption processing in DTLS connections, allowing attackers to execute arbitrary code.

The vulnerability of the Mbed TLS software is related to errors in encryption processing in DTLS connections when using zero-key encryption or RC4 encryption. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-43615

Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow...

CVE-2023-45199

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution...

CVE-2023-45199

Mbed TLS 3.2.x through 3.4.x before 3.5 has a Buffer Overflow that can lead to remote Code execution...

CVE-2023-43615

Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow...