Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (5)
| Vulnerability |
Summary |
Aliases |
|
VCID-1teg-yvuy-4kga
|
Multiple vulnerabilities have been discovered in Mbed TLS, the worst of which could lead to information disclosure or denial of service.
|
CVE-2022-46392
|
|
VCID-5x2e-paq2-nyf9
|
Multiple vulnerabilities have been discovered in Mbed TLS, the worst of which could result in arbitrary code execution.
|
CVE-2021-44732
|
|
VCID-8vmc-tp28-wyae
|
In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.
|
CVE-2021-24119
|
|
VCID-t2j5-4x1d-2kb1
|
Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum.c in Mbed TLS Mbed TLS all versions before 3.0.0, 2.27.0 or 2.16.11 allows attackers with access to precise enough timing and memory access information (typically an untrusted operating system attacking a secure enclave such as SGX or the TrustZone secure world) to recover the private keys used in RSA.
|
CVE-2021-36647
|
|
VCID-x5we-9dmz-p7bh
|
Multiple vulnerabilities have been discovered in Mbed TLS, the worst of which could result in arbitrary code execution.
|
CVE-2021-43666
|