Lucene search
+L

3 matches found

OSV
OSV
•added 2024/09/05 7:15 p.m.•22 views

UBUNTU-CVE-2024-45158

An issue was discovered in Mbed TLS 3.6 before 3.6.1. A stack buffer overflow in mbedtlsecdsadertoraw and mbedtlsecdsarawtoder can occur when the bits parameter is larger than the largest supported curve. In some configurations with PSA disabled, all values of bits are affected. This never happen...

9.8CVSS6.1AI score0.00683EPSS
SaveExploits0References5
CVE
CVE
•added 2024/09/05 12:00 a.m.•103 views

CVE-2024-45158

Mbed TLS versions 3.6 through 3.6.0 are vulnerable to a stack buffer overflow in the mbedtls_ecdsa_der_to_raw() and mbedtls_ecdsa_raw_to_der() functions. This occurs when the bits parameter exceeds the largest supported curve; in configurations where PSA is disabled, all values of bits are impact...

9.8CVSS7.5AI score0.00683EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/05 12:00 a.m.•4 views

CVE-2024-45158: Stack-based Buffer Overflow

An issue was discovered in Mbed TLS 3.6 before 3.6.1. A stack buffer overflow in mbedtlsecdsadertoraw and mbedtlsecdsarawtoder can occur when the bits parameter is larger than the largest supported curve. In some configurations with PSA disabled, all values of bits are affected. This never happen...

9.8CVSS6AI score0.00683EPSS
SaveExploits0References4
Rows per page
Query Builder