CVE-2024-28836

An issue was discovered in Mbed TLS 3.5.x before 3.6.0. When negotiating the TLS version on the server side, it can fall back to the TLS 1.2 implementation of the protocol if it is disabled. If the TLS 1.2 implementation was disabled at build time, a TLS 1.2 client could put a TLS 1.3-only server into an infinite loop processing a TLS 1.2 ClientHello, resulting in a denial of service. If the TLS 1.2 implementation was disabled at runtime, a TLS 1.2 client can successfully establish a TLS 1.2 connection with the server.

• CWE-835

• https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0Release Notes
• https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/Vendor Advisory
• https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.6.0Release Notes
• https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/Vendor Advisory

Published

Apr 3, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28830Insertion of Sensitive Information into Log File in Checkmk …2.7
• CVE-2024-28831Stored XSS in some confirmation pop-ups in Checkmk before ve…5.4
• CVE-2024-28832Stored XSS in the Crash Report page in Checkmk before versio…4.8
• CVE-2024-28833Improper restriction of excessive authentication attempts wi…7.5
• CVE-2024-28834A flaw was found in GnuTLS. The Minerva attack is a cryptogr…5.3
• CVE-2024-28835A flaw has been discovered in GnuTLS where an application cr…5
• CVE-2024-2884Out of bounds read in V8 in Google Chrome prior to 121.0.616…6.5
• CVE-2024-28847OpenMetadata is a unified platform for discovery, observabil…8.8
• CVE-2024-28848OpenMetadata is a unified platform for discovery, observabil…8.8
• CVE-2024-28849follow-redirects is an open source, drop-in replacement for …6.5
• CVE-2024-2885Use after free in Dawn in Google Chrome prior to 123.0.6312.…8.8
• CVE-2024-28850WP Crontrol controls the cron events on WordPress websites. …8.1