{"id":"CVE-2022-35409","aliases":["ALPINE-CVE-2022-35409","DEBIAN-CVE-2022-35409","DLA-3249-1","EUVD-2022-38299","GHSA-m52q-qpp4-f753","JLSEC-2025-218","MGASA-2022-0415","UBUNTU-CVE-2022-35409","openSUSE-SU-2022:10247-1","openSUSE-SU-2024:12478-1","openSUSE-SU-2026:11119-1"],"status":"published","title":"An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,...","description":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.023,"percentile":0.83419,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2022-07-15T00:00:00Z","modified":"2026-11-03T08:01:32Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"mbedtls","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"mbedtls","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"mbedtls","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"mbedtls","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"mbedtls","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mbedtls","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"mbedtls2","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mbedtls2","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls2","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls2","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls2","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls3","fixed_in":["2.28.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"mbedtls","fixed_in":["2.28.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mbedtls","fixed_in":["2.28.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mbedtls","fixed_in":["2.28.1-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"MbedTLS_jll","fixed_in":["2.28.2+0"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"mbedtls","fixed_in":["2.16.12-1.1.mga8"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-2","fixed_in":["2.28.1-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-0~deb10u1"}]}],"versions":["2.16.0-1","2.16.2-1","2.16.3-1","2.16.4-1","2.16.5-1"],"bundled":18},{"source":"osv","ecosystem":"Julia","package":"MbedTLS_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.28.2+0"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.12-1.1.mga8"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.9-0.1ubuntu1","2.16.11-0.1ubuntu1","2.16.11-0.3","2.28.0-1","2.28.0-1build1","2.28.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP3","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-bp153.2.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.16.9-bp153.2.8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.1-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-1.1"}]}],"bundled":14}],"products":[{"vendor":"arm","product":"mbed_tls"},{"vendor":"debian","product":"debian_linux"},{"vendor":"trustedfirmware","product":"mbed_tls"}],"references":[{"url":"https://github.com/Mbed-TLS/mbedtls/releases","tags":["x_transferred","Release Notes","package","web"]},{"url":"https://mbed-tls.readthedocs.io/en/latest/security-advisories/advisories/mbedtls-security-advisory-2022-07.html","tags":["x_transferred","Exploit","Mitigation","Vendor Advisory","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35409","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m52q-qpp4-f753"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-35409","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35409.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-35409","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0415.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=31058","tags":["report"]},{"url":"https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/mbedtls-security-advisory-2022-07/","tags":["advisory"]},{"url":"https://github.com/Mbed-TLS/mbedtls/commit/e5af9fabf7d68e3807b6ea78792794b8352dbba2","tags":["web","report"]},{"url":"https://ubuntu.com/security/CVE-2022-35409","tags":["report"]},{"url":"https://github.com/Mbed-TLS/mbedtls-docs/blob/5e9790353d2d9e41e85262eebe52fd90bb49f1e0/security-advisories/advisories/mbedtls-security-advisory-2022-07.md","tags":["report"]},{"url":"https://github.com/Mbed-TLS/mbedtls/commit/f333dfab4a6c2d8a604a61558a8f783145161de4","tags":["report"]},{"url":"https://github.com/Mbed-TLS/mbedtls/commit/862acb84033840b7e6376a4155ed5be2a6a4e117","tags":["report"]},{"url":"https://github.com/Mbed-TLS/mbedtls/commit/a39170bbed1f5a69f108ea19fe3510c3643d53ab","tags":["report"]},{"url":"https://github.com/Mbed-TLS/mbedtls/commit/33f41a8fa858128d5e9a1d1e1afbd4e63f24d444","tags":["report"]},{"url":"https://github.com/Mbed-TLS/mbedtls/commit/4353d3d593cda3849a04c676288e0c790fa86a3c","tags":["report"]},{"url":"https://github.com/Mbed-TLS/mbedtls/commit/3c036f54cc3a25e4d6b8003202b7e640522f4621","tags":["report"]},{"url":"https://github.com/Mbed-TLS/mbedtls/commit/6b4f062cde84b9df57275676c428508ec6e41211","tags":["report"]},{"url":"https://github.com/Mbed-TLS/mbedtls/commit/719c723afc63930d3472a12c0edb654a7d08d6b9","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-35409","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3NAO4EU3XHQJB2IY7LNSERGELWFEJAUJ/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201581","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-35409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-35409","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46393","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-35409","description":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.","status":"published","published":"2022-07-15T00:00:00Z","modified":"2024-08-03T09:36:44.078Z","updated_at":"2026-11-02T14:34:39.935681Z"}],"euvd":[{"id":"EUVD-2022-38299","description":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.","status":"published","published":"2022-07-15T00:00:00Z","modified":"2024-08-03T09:36:44Z","updated_at":"2026-11-03T03:25:27.391244Z"}],"ghsa":[{"id":"GHSA-m52q-qpp4-f753","title":"An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,...","description":"An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.","status":"published","published":"2022-07-16T00:00:29Z","modified":"2023-02-03T05:01:31Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:52:59.998713Z"}],"nvd":[{"id":"CVE-2022-35409","description":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.","status":"published","published":"2022-07-15T14:15:09.84Z","modified":"2026-06-17T04:51:47.213Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:07:23.686531Z"}],"osv":[{"id":"ALPINE-CVE-2022-35409","description":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.","status":"published","published":"2022-07-15T14:15:09.84Z","modified":"2026-11-03T07:30:38.660453129Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-03T07:50:38.973973Z"},{"id":"DEBIAN-CVE-2022-35409","description":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.","status":"published","published":"2022-07-15T14:15:09.84Z","modified":"2026-11-03T08:01:32.328012687Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"JLSEC-2025-218","title":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0","description":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have `MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE` enabled and `MBEDTLS_SSL_IN_CONTENT_LEN` less than a threshold that depends on the configuration: 258 bytes if using `mbedtls_ssl_cookie_check`, and possibly up to 571 bytes with a custom cookie check function.","status":"published","published":"2025-11-21T15:59:04.054Z","modified":"2026-07-23T22:30:21.598085676Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T15:47:17.805107Z"},{"id":"UBUNTU-CVE-2022-35409","description":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.","status":"published","published":"2022-07-15T14:15:00Z","modified":"2026-04-22T13:25:38.470632Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:54.697021Z"},{"id":"CVE-2022-35409","description":"An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.","status":"published","published":"2022-07-15T00:00:00Z","modified":"2026-10-28T02:31:14.663897196Z","updated_at":"2026-11-02T15:44:26.195407Z"},{"id":"DLA-3249-1","title":"mbedtls - security update","status":"published","published":"2022-12-26T00:00:00Z","modified":"2026-03-09T01:22:32.743764Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2022-0415","title":"Updated mbedtls packages fix security vulnerability","description":"An unauthenticated remote host could send an invalid ClientHello message in\nwhich the declared length of the cookie extends past the end of the message.\nA DTLS server with MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled would read past\nthe end of the message up to the declared length of the cookie. This could\ncause a buffer overread of up to 255 bytes on the heap in vulnerable DTLS\nservers, which may lead to a crash or to information disclosure via the\ncookie check function (CVE-2022-35409).\n\nThis issue has been patched, backporting a fix from upstream's 2.28.0 release.\n","status":"published","published":"2022-11-08T19:44:28Z","modified":"2026-04-16T04:42:32.818086179Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2022:10247-1","title":"Security update for mbedtls","description":"This update for mbedtls fixes the following issues:\n\n- CVE-2022-35409: Fixed buffer overread in DTLS ClientHello parsing (boo#1201581).\n","status":"published","published":"2022-12-22T12:33:10Z","modified":"2025-05-07T18:12:59.134008Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:12478-1","title":"libmbedcrypto7-2.28.1-1.1 on GA media","description":"These are all security issues fixed in the libmbedcrypto7-2.28.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:53:30.201022Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"openSUSE-SU-2026:11119-1","title":"libeverest-3.6.6-1.1 on GA media","description":"These are all security issues fixed in the libeverest-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-25T00:00:00Z","modified":"2026-06-26T08:15:07.625184367Z","updated_at":"2026-11-02T16:58:38.95195Z"}]}}