Search for vulnerabilities
Vulnerability details: VCID-82j8-be3j-kffw
Vulnerability ID VCID-82j8-be3j-kffw
Aliases CVE-2024-49195
Summary Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque key pair
Status Published
Exploitability 0.5
Weighted Severity 4.0
Risk 2.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00043 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00144 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00159 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00159 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00159 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00159 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00175 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00179 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00179 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00179 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00179 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00179 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00179 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00179 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00179 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00201 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00264 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
epss 0.00557 https://api.first.org/data/v1/epss?cve=CVE-2024-49195
cvssv3.1 8.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-49195
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49195
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://mbed-tls.readthedocs.io/en/latest/security-advisories/mbedtls-security-advisory-2024-10-1/
https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/
cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*
CVE-2024-49195 https://nvd.nist.gov/vuln/detail/CVE-2024-49195
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.09902
EPSS Score 0.00043
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
2024-10-16T13:32:27.780424+00:00 NVD Importer Import https://nvd.nist.gov/vuln/detail/CVE-2024-49195 34.0.2