CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
AI Score
Confidence
Low
EPSS
Percentile
15.5%
An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and
3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared
memory.
github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/mbedtls-security-advisory-2024-03.md
launchpad.net/bugs/cve/CVE-2024-28960
mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-03/
mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/
nvd.nist.gov/vuln/detail/CVE-2024-28960
security-tracker.debian.org/tracker/CVE-2024-28960
www.cve.org/CVERecord?id=CVE-2024-28960