Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jggj-wjwc-8gg9

Опубликовано: 22 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.

An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.

EPSS

Процентиль: 41%
0.00465
Низкий

7.5 High

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 3 года назад

An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.

CVSS3: 7.5
nvd
почти 3 года назад

An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.

CVSS3: 7.5
msrc
почти 2 года назад

Описание отсутствует

CVSS3: 7.5
debian
почти 3 года назад

An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_sess ...

CVSS3: 7.5
altlinux
почти 3 года назад

ALT-PU-2024-1578: package `mbedtls` update to version 3.5.2-alt1

EPSS

Процентиль: 41%
0.00465
Низкий

7.5 High

CVSS3

Дефекты

CWE-384