CVE-2024-49195

Name
CVE-2024-49195
Description
Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair
NVD Severity
unknown
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/
https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-10-1/

Match rules

CPE URI Source package Min version Max version
n/a == n/a == n/a
cpe:2.3:a:mbed-tls:mbedtls:*:*:*:*:*:*:*:* mbedtls >= 3.5.0 < 3.6.2
cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:* mbed_tls >= 3.5.0 < 3.6.2

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
mbedtls edge-main 3.6.2-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
mbedtls edge-main 3.6.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
mbedtls 3.22-main 3.6.2-r0 None fixed
mbedtls 3.22-main 3.6.1-r0 None possibly vulnerable
mbedtls 3.21-main 3.6.2-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
mbedtls 3.21-main 3.6.1-r0 None possibly vulnerable
mbedtls 3.20-main 3.6.2-r0 Natanael Copa <ncopa@alpinelinux.org> fixed
mbedtls 3.20-main 3.6.1-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable