Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jqcx-vw98-5q84

Опубликовано: 03 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello.

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello.

EPSS

Процентиль: 51%
0.00736
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 9.1
ubuntu
больше 2 лет назад

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello.

CVSS3: 9.1
nvd
больше 2 лет назад

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello.

CVSS3: 9.1
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 9.1
debian
больше 2 лет назад

In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can c ...

EPSS

Процентиль: 51%
0.00736
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-121