HIGH 8.2 Microsoft
CVE-2024-28960
An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0 and Mbed Crypto. The PSA Crypto API mishandles shared memory.
Microsoft Security Update 2024-Mar: An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0 and Mbed Crypto. The PSA Crypto API mishandles shared memory.
Affected Products
- cbl2 hvloader 1.0.1-6 on CBL Mariner 2.0
- cbl2 hvloader 1.0.1-5 on CBL Mariner 2.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-28960
- https://nvd.nist.gov/vuln/detail/CVE-2024-28960
This high severity vulnerability with a CVSS score of 8.2 was published on 2024-03-12 via Microsoft. Affected: cbl2 hvloader 1.0.1-6 on CBL Mariner 2.0, cbl2 hvloader 1.0.1-5 on CBL Mariner 2.0.
vulnfeed aggregates 10103 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.