Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-52353
7.5
HIGHCVSS v3
Published
January 21, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.
Mbed-TLS/mbedtls
GitHubAn open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
GitHubAn open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.< 3.5.2NVD