Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

CVE-2024-23744 is a vulnerability in Mbed TLS version 3.5.1 where a client sending a TLS 1.3 ClientHello message without extensions can cause a persistent handshake denial. This issue affects Microsoft products including Azure Linux and CBL Mariner 2.0. No CVSS score is provided, and no known exploits are reported in the wild. The vendor advisory does not specify patch availability or mitigation steps.

An issue was discovered in Mbed TLS 3.5.1 used in Microsoft products where a TLS 1.3 ClientHello message lacking extensions can cause a persistent denial of handshake, effectively disrupting TLS connections. This vulnerability impacts the handshake process and may result in denial of service conditions. The affected products include Microsoft Azure Linux and CBL Mariner 2.0. No official patch or remediation details are provided in the available data.

Detailed information about An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without exten

An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions. - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-23744 An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions. - VEX

Microsoft Support Lifecycle

Common Vulnerability Scoring System

An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.

CVE-2024-23744 is a high-severity vulnerability identified in Mbed TLS version 3.5.1, a widely used open-source cryptographic library that provides SSL/TLS capabilities. The vulnerability arises when a client initiates a TLS 1.3 handshake by sending a ClientHello message that lacks any extensions. Under these conditions, the server running the affected Mbed TLS version experiences a persistent handshake denial, effectively causing a denial of service (DoS) condition. This flaw is categorized under CWE-400, which relates to uncontrolled resource consumption, indicating that the server's resources are exhausted or locked due to improper handling of such malformed handshake requests. The CVSS v3.1 score of 7.5 reflects a high severity, with the vector indicating that the attack can be executed remotely (AV:N), requires no privileges (PR:N), no user interaction (UI:N), and impacts availability (A:H) without affecting confidentiality or integrity. The vulnerability does not require authentication and can be triggered by any remote attacker capable of initiating a TLS 1.3 handshake with the vulnerable server. No known exploits are currently reported in the wild, and no patches or vendor-specific mitigations have been linked yet. This issue could lead to service disruption for applications relying on Mbed TLS 3.5.1 for secure communications, potentially impacting any network-facing service that accepts TLS 1.3 connections without proper validation of ClientHello extensions.

Detailed information about CVE-2024-23744: n/a in n/a affecting n/a n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2024-23744: n/a in n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-23744: n/a in n/a


An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions.CVE-2024-23744 0 CVE-2024-23744 is a vulnerability in Mbed TLS version 3.5.1 where a client sending a TLS 1.3 ClientHello message without extensions can cause a persistent handshake denial. This issue affects Microsoft products including Azure Linux and CBL Mariner 2.0. No CVSS score is provided, and no known exploits are reported in the wild. The vendor advisory does not specify patch availability or mitigation steps. MediumVulnerability#gcve #csaf #cve-2024-23744 Join the discussion	GCVE Database	11/28/2024, 00:00:00 UTC Added: 09/03/2026, 15:16:49 UTC
CVE-2024-23744: n/a in n/aCVE-2024-23744 0 An issue was discovered in Mbed TLS 3.5.1. There is persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions. HighVulnerabilityGermanyFranceNetherlands+7#cve #cve-2024-23744 Join the discussion	CVE Database V5	01/21/2024, 00:00:00 UTC Added: 06/04/2025, 15:29:29 UTC

Threats Tagged 'cve-2024-23744'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-23744'

Lead Pen Test Professional