PT-2024-31442 · Mbed Tls · Mbed Tls

Published 2024-09-05 · Updated 2025-05-16 · CVE-2024-45158

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mbed TLS versions 3.6 through 3.6.0

Description A stack buffer overflow can occur in mbedtls ecdsa der to raw() and mbedtls ecdsa raw to der() when the bits parameter is larger than the largest supported curve. In some configurations with PSA disabled, all values of bits are affected. This issue can affect applications that call these functions directly.

Recommendations For Mbed TLS versions 3.6 through 3.6.0, update to version 3.6.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the mbedtls ecdsa der to raw() and mbedtls ecdsa raw to der() functions to minimize the risk of exploitation. Avoid using bits parameter values larger than the largest supported curve in these functions until the issue is resolved.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-45158

Affected Products

Mbed Tls

References · 16

• https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-08-2 · Vendor Advisory
• https://mbed-tls.readthedocs.io/en/latest/security-advisories · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-45158 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45158 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-45158 · Security Note
• https://osv.dev/vulnerability/CVE-2024-45158 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2024-45158 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-45158 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1831793341651918897 · Twitter Post
• https://github.com/Mbed-TLS/mbedtls/releases · Note
• https://t.me/cvenotify/122676 · Telegram Post
• https://twitter.com/CVEnew/status/1831767196420223069 · Twitter Post
• https://security.alpinelinux.org/vuln/CVE-2024-45158 · Note
• https://t.me/cvedetector/4939 · Telegram Post
• https://t.me/cvenotify/93535 · Telegram Post