AZL-47703

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-47703.json

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-47703

Upstream

CVE-2024-28960

Published

2024-03-29T06:15:07Z

Modified

2026-04-01T05:17:04.237791Z

Summary

CVE-2024-28960 affecting package hvloader for versions less than 1.0.1-6

Details

An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and Mbed Crypto. The PSA Crypto API mishandles shared memory.

References

https://nvd.nist.gov/vuln/detail/CVE-2024-28960

Affected packages

Azure Linux:2 / hvloader

Package

Name: hvloader
Purl: pkg:rpm/azure-linux/hvloader

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.0.1-6

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-47703.json"