Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jqcx-vw98-5q84

Опубликовано: 03 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello.

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello.

EPSS

Процентиль: 57%
0.00348
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 9.1
ubuntu
почти 2 года назад

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello.

CVSS3: 9.1
nvd
почти 2 года назад

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello.

CVSS3: 9.1
msrc
около 1 года назад

Описание отсутствует

CVSS3: 9.1
debian
почти 2 года назад

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can c ...

EPSS

Процентиль: 57%
0.00348
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-121