An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.
CVE-2024-23744 is a vulnerability in Mbed TLS version 3.5.1 where a client sending a TLS 1.3 ClientHello message without extensions can cause a persistent handshake denial. This issue affects Microsoft products including Azure Linux and CBL Mariner 2.0. No CVSS score is provided, and no known exploits are reported in the wild. The vendor advisory does not specify patch availability or mitigation steps.
AI Analysis
Technical Summary
An issue was discovered in Mbed TLS 3.5.1 used in Microsoft products where a TLS 1.3 ClientHello message lacking extensions can cause a persistent denial of handshake, effectively disrupting TLS connections. This vulnerability impacts the handshake process and may result in denial of service conditions. The affected products include Microsoft Azure Linux and CBL Mariner 2.0. No official patch or remediation details are provided in the available data.
Potential Impact
The vulnerability can cause persistent denial of handshake, leading to denial of service for clients attempting to establish TLS 1.3 connections without extensions. There is no evidence of code execution or data compromise. No known exploitation in the wild has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the Microsoft Security Response Center advisory for current remediation guidance. No specific mitigation or workaround is provided in the available information.
An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.
Description
CVE-2024-23744 is a vulnerability in Mbed TLS version 3.5.1 where a client sending a TLS 1.3 ClientHello message without extensions can cause a persistent handshake denial. This issue affects Microsoft products including Azure Linux and CBL Mariner 2.0. No CVSS score is provided, and no known exploits are reported in the wild. The vendor advisory does not specify patch availability or mitigation steps.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An issue was discovered in Mbed TLS 3.5.1 used in Microsoft products where a TLS 1.3 ClientHello message lacking extensions can cause a persistent denial of handshake, effectively disrupting TLS connections. This vulnerability impacts the handshake process and may result in denial of service conditions. The affected products include Microsoft Azure Linux and CBL Mariner 2.0. No official patch or remediation details are provided in the available data.
Potential Impact
The vulnerability can cause persistent denial of handshake, leading to denial of service for clients attempting to establish TLS 1.3 connections without extensions. There is no evidence of code execution or data compromise. No known exploitation in the wild has been reported.
Mitigation Recommendations
Patch status is not yet confirmed — check the Microsoft Security Response Center advisory for current remediation guidance. No specific mitigation or workaround is provided in the available information.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_vex
- Csaf Version
- 2.0
- Publisher
- Microsoft Security Response Center
- Advisory Id
- msrc_CVE-2024-23744
- Cve Count
- 1
Threat ID: 6a998f61acd9273b4919340c
Added to database: 09/03/2026, 15:16:49 UTC
Last enriched: 09/07/2026, 19:57:03 UTC
Last updated: 09/10/2026, 19:36:47 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.