Integer Overflow

🗓️ 30 Jan 2024 16:41:08Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 27 Views

mbedtls_x509_set_extension function vulnerability due to Integer Overflow

Reporter	Title	Published	Views	Family All 64
AlpineLinux	CVE-2024-23775	31 Jan 202400:00	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in mbedtls	3 May 202623:59	–	astralinux
BDU FSTEC	The vulnerability of the mbedtls_x509_set_extension function in Mbed TLS software allows a attacker to trigger a service failure.	16 Feb 202400:00	–	bdu_fstec
CBLMariner	CVE-2024-23775 affecting package hvloader for versions less than 1.0.1-6	27 Nov 202421:27	–	cbl_mariner
Circl	CVE-2024-23775	31 Jan 202409:32	–	circl
CNNVD	Mbed TLS Security Vulnerability	31 Jan 202400:00	–	cnnvd
CVE	CVE-2024-23775	31 Jan 202400:00	–	cve
Cvelist	CVE-2024-23775	31 Jan 202400:00	–	cvelist
Debian CVE	CVE-2024-23775	31 Jan 202400:00	–	debiancve
Fedora	[SECURITY] Fedora 39 Update: mbedtls-2.28.7-1.fc39	17 Feb 202400:57	–	fedora

Vulners

Node

mbedtls mbedtlsMatch2.28.2-r0os

AND

mbedtls mbedtlsMatch2.28.3-r0os

AND

mbedtls mbedtlsMatch2.28.4-r0os

AND

mbedtls mbedtlsMatch2.28.1-r0os

AND

mbedtls mbedtlsMatch2.28.0-r0os

AND

mbedtls mbedtlsMatch2.28.5-r0os

AND

alpinelinux alpine_linuxMatch3.16

OR

mbedtls mbedtlsMatch2.28.6-r0os

AND

mbedtls mbedtlsMatch2.28.5-r0os

AND

alpinelinux alpine_linuxMatch3.19

OR

mbedtls mbedtlsMatch2.16.10-r1os

AND

mbedtls mbedtlsMatch2.16.10-r0os

AND

mbedtls mbedtlsMatch2.28.3-r1os

AND

mbedtls mbedtlsMatch2.28.3-r3os

AND

mbedtls mbedtlsMatch2.16.5-r0os

AND

mbedtls mbedtlsMatch2.28.4-r0os

AND

mbedtls mbedtlsMatch2.16.12-r0os

AND

mbedtls mbedtlsMatch2.28.1-r0os

AND

mbedtls mbedtlsMatch2.28.6-r0os

AND

mbedtls mbedtlsMatch2.16.3-r0os

AND

mbedtls mbedtlsMatch2.28.2-r0os

AND

mbedtls mbedtlsMatch2.28.3-r0os

AND

mbedtls mbedtlsMatch2.16.9-r0os

AND

mbedtls mbedtlsMatch2.28.1-r1os

AND

mbedtls mbedtlsMatch2.28.5-r0os

AND

mbedtls mbedtlsMatch2.16.6-r0os

AND

mbedtls mbedtlsMatch2.28.3-r2os

AND

mbedtls mbedtlsMatch2.28.0-r0os

AND

alpinelinux alpine_linuxMatchedge

OR

mbedtls mbedtlsMatch2.28.3-r1os

AND

mbedtls mbedtlsMatch2.28.4-r0os

AND

mbedtls mbedtlsMatch2.28.5-r0os

AND

alpinelinux alpine_linuxMatch3.18

OR

mbedtls mbedtlsMatch2.28.4-r0os

AND

mbedtls mbedtlsMatch2.28.3-r0os

AND

mbedtls mbedtlsMatch2.28.5-r0os

AND

mbedtls mbedtlsMatch2.28.1-r0os

AND

mbedtls mbedtlsMatch2.28.2-r0os

AND

alpinelinux alpine_linuxMatch3.17

Source	Link
secdb	www.secdb.alpinelinux.org/v3.16/main.yaml
secdb	www.secdb.alpinelinux.org/v3.17/main.yaml
secdb	www.secdb.alpinelinux.org/v3.19/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
secdb	www.secdb.alpinelinux.org/v3.18/main.yaml
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IIBPEYSVRK4IFLBSYJAWKH33YBNH5HR2/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GP5UU7Z6LJNBLBT4SC5WWS2HDNMTFZH5/
mbed-tls	www.mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-01-2/

22 Feb 2024 07:50Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.0112

mbedtls integer overflow denial of service malicious input software