← All advisories

High severity7.5NVD Advisory· Published Jan 21, 2024· Updated Jun 5, 2026

CVE-2024-23744

CVE-2024-23744

Description

An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Arm/MbedTLS2 versions
cpe:2.3:a:trustedfirmware:mbed_tls:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:trustedfirmware:mbed_tls:*:*:*:*:*:*:*:*range: >3.4.0,<=3.5.1
- (no CPE)range: <3.5.1
Mbed TLS/Mbed TLSdescription

Patches

Vulnerability mechanics

References

1

github.com/Mbed-TLS/mbedtls/issues/8694nvdExploitIssue TrackingPatch

News mentions

0

No linked articles in our index yet.