CVE-2023-52353

An issue was discovered in Mbed TLS through 3.5.1. In mbedtls_ssl_session_reset, the maximum negotiable TLS version is mishandled. For example, if the last connection negotiated TLS 1.2, then 1.2 becomes the new maximum.

• CWE-384
• CWE-384

• https://github.com/Mbed-TLS/mbedtls/issues/8654Exploit, Issue Tracking, Patch
• https://github.com/Mbed-TLS/mbedtls/issues/8654Exploit, Issue Tracking, Patch

Published

Jan 21, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52348In ril service, there is a possible out of bounds write due …4.4
• CVE-2023-52349In ril service, there is a possible out of bounds write due …4.4
• CVE-2023-5235The Ovic Responsive WPBakery WordPress plugin before 1.2.9 d…8.8
• CVE-2023-52350In ril service, there is a possible out of bounds write due …4.4
• CVE-2023-52351In ril service, there is a possible out of bounds write due …7.8
• CVE-2023-52352In Network Adapter Service, there is a possible missing perm…5.5
• CVE-2023-52354chasquid before 1.13 allows SMTP smuggling because LF-termin…7.5
• CVE-2023-52355An out-of-memory flaw was found in libtiff that could be tri…7.5
• CVE-2023-52356A segment fault (SEGV) flaw was found in libtiff that could …7.5
• CVE-2023-52357Vulnerability of serialization/deserialization mismatch in t…7.5
• CVE-2023-52358Vulnerability of configuration defects in some APIs of the a…6.2
• CVE-2023-52359Vulnerability of permission verification in some APIs in the…7.5