CVE-2021-35409

Security update for mbedtls

No score

This update for mbedtls fixes the following issues:

CVE-2022-35409: Fixed buffer overread in DTLS ClientHello parsing (boo#1201581).

What each source reports

OSVopenSUSE-SU-2022:10247-1 No score

Security update for mbedtls

This update for mbedtls fixes the following issues:

CVE-2022-35409: Fixed buffer overread in DTLS ClientHello parsing (boo#1201581).

Record: openSUSE-SU-2022:10247-1
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`mbedtls` SUSE:Package Hub 15 SP3 From an advisory covering 2 CVEs	before 2.16.9-bp153.2.8.1	2.16.9-bp153.2.8.1
`mbedtls` openSUSE:Leap 15.3 From an advisory covering 2 CVEs	before 2.16.9-bp153.2.8.1	2.16.9-bp153.2.8.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-35409 is a vulnerability with no CVSS score yet in mbedtls, published December 22, 2022. No source lists public exploit code. No source names a fixed version.

What each source reports

Affected packages

History

In short

References