VDB
CVE-2023-43615
CVE-2023-43615
PUBLISHED
CVSS 7.5 HIGH
Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.
EPSS 0.79% · 52.8th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.79%
52.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| fedoraproject | fedora | 37, 38, 39 |
| mbed | mbedtls | 2x, * |
| n/a | n/a | n/a |
| arm | mbed_tls | 3.0.0, 2.0.0 |
Timeline
- Oct 7, 2023 CVE Published
- Oct 7, 2023 EPSS Score
- Nov 8, 2023 EPSS Score
- Dec 9, 2023 EPSS Score
- Feb 10, 2024 EPSS Score
- Mar 13, 2024 EPSS Score
- Apr 14, 2024 EPSS Score
- May 15, 2024 EPSS Score
- Jun 16, 2024 EPSS Score
- Jul 18, 2024 EPSS Score
- Sep 19, 2024 EPSS Score
- Sep 19, 2024 CVE Updated
References
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2023-10-1/ url
- FEDORA-2023-5c6521d81d vendor-advisory
- FEDORA-2023-0352951853 vendor-advisory
- FEDORA-2023-e0ab860391 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-43615 advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BDSHAANRULB57GVS5B3DZHXL5KCC7OWQ url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGRB5MO2KUJKYPMGXMIZH2WRH6QR5UZS url
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7SB7L6A56QZALDTOZ6O4X7PTC4I647R url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BDSHAANRULB57GVS5B3DZHXL5KCC7OWQ url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GGRB5MO2KUJKYPMGXMIZH2WRH6QR5UZS url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/O7SB7L6A56QZALDTOZ6O4X7PTC4I647R url
- https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2023-10-1 url