An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
28 May 2025, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Arm
Fedoraproject Fedoraproject fedora Arm mbed Crypto Arm mbed Tls |
|
| CPE | cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:* cpe:2.3:a:arm:mbed_crypto:*:*:*:*:*:*:*:* |
|
| References | () https://github.com/Mbed-TLS/mbedtls-docs/blob/main/security-advisories/mbedtls-security-advisory-2024-03.md - Vendor Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5YE3QRREGJC6K34JD4LZ5P3IALNX4QYY/ - Third Party Advisory, Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6UZNBMKYEV2J5DI7R4BQGL472V7X3WJY/ - Third Party Advisory, Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NCDU52ZDA7TX3HC5JCU6ZZIJQOPTNBK6/ - Third Party Advisory, Mailing List | |
| References | () https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/ - Vendor Advisory |
Information
Published : 2024-03-29 06:15
Updated : 2025-05-28 17:42
NVD link : CVE-2024-28960
Mitre link : CVE-2024-28960
CVE.ORG link : CVE-2024-28960
JSON object : View
Products Affected
arm
- mbed_tls
- mbed_crypto
fedoraproject
- fedora
CWE
CWE-284
Improper Access Control