Upstream information
Description
Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having important severity.
| CVSS detail | National Vulnerability Database | 
|---|---|
| Base Score | 7.5 | 
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | 
| Attack Vector | Network | 
| Attack Complexity | Low | 
| Privileges Required | None | 
| User Interaction | None | 
| Scope | Unchanged | 
| Confidentiality Impact | High | 
| Integrity Impact | None | 
| Availability Impact | None | 
| CVSSv3 Version | 3.1 | 
SUSE Timeline for this CVE
CVE page created: Sat Oct 7 04:00:03 2023CVE page last modified: Mon Oct 6 19:47:24 2025