CVE-2024-23775: Integer Overflow
Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2 allows attackers to cause a denial of service (DoS) via mbedtlsx509setextension().
Other sources
Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows attackers to cause a denial of service (DoS) via mbedtlsx509setextension().
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23775?
CVE-2024-23775 is classified as a denial of service vulnerability that impacts Mbed TLS versions prior to 2.28.7 and 3.x before 3.5.2.
How do I fix CVE-2024-23775?
To fix CVE-2024-23775, update Mbed TLS to version 2.28.7 or 3.5.2 or later.
What causes the CVE-2024-23775 vulnerability?
The CVE-2024-23775 vulnerability is caused by an integer overflow in the mbedtls_x509_set_extension() function.
Which versions of Mbed TLS are affected by CVE-2024-23775?
CVE-2024-23775 affects Mbed TLS versions 2.x before 2.28.7 and 3.x before 3.5.2.
Can CVE-2024-23775 lead to any exploitation?
Yes, CVE-2024-23775 can be exploited to cause a denial of service condition.