{"id":"CVE-2026-35336","aliases":["DEBIAN-CVE-2026-35336","MGASA-2026-0375","UBUNTU-CVE-2026-35336","openSUSE-SU-2026:11267-1"],"status":"published","title":"Updated mbedtls packages fix security vulnerabilities","description":"TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised\ngroup. (CVE-2026-25832)\nPossible buffer overflow in mbedtls_ecdh_calc_secret(). (CVE-2026-35336)\nX.509 CA bit forgery via invalid basicConstraints extension.\n(CVE-2026-49300)\nUse-after-free in mbedtls_pkcs7_free() when reusing a PKCS7 context.\n(CVE-2026-50579)\nRemote buffer overflow in TLS 1.2 ECDHE-PSK client handshake.\n(CVE-2026-50580)\nExtended master secret calculation failure ignored. (CVE-2026-50581)\nA 1-byte buffer overread when parsing a malformed ECC public key in the\nPK module. (CVE-2026-50583)\nChaCha20 counter overflow can reuse keystream. (CVE-2026-50584)\nIncomplete context reset in mbedtls_ssl_session_reset().\n(CVE-2026-50585)\nA potential information disclosure in TLS 1.2 servers using session\ntickets. If the session ticket write callback failed without setting the\nlifetime output parameter, Mbed TLS could send 4 bytes of uninitialized\nstack memory to the peer in the NewSessionTicket message.\n(CVE-2026-50586)\nTiming side-channel in RSA PKCS#1 v1.5 decryption. (CVE-2026-50587)\nOut-of-bounds read in TLS 1.2 EC J-PAKE ServerKeyExchange parsing.\n(CVE-2026-50588)\nIgnored TLS 1.3 resumption secret derivation error. (CVE-2026-50640)\nHeap corruption with early renegotiation after corrupted record in DTLS.\n(CVE-2026-50713)\nSide channel leak in ECC optimized modp. (CVE-2026-54435)\nSignature algorithm restrictions not enforced on certificate chain.\n(CVE-2026-54441)\nA random generator fault can compromise TLS data integrity.\n(CVE-2026-73064)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2026-07-14T00:00:00Z","modified":"2026-10-17T12:58:12Z","fixes":[{"ecosystem":"Debian:14","package":"mbedtls","fixed_in":["3.6.7-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.28.3-1","2.28.4-1","2.28.5-1","2.28.6-1","2.28.7-1","2.28.7-1.1","2.28.7-1.1~exp1","2.28.8-1","3.6.0-1","3.6.0-2","3.6.0-3","3.6.2-1","3.6.2-2","3.6.2-3","3.6.3-1","3.6.4-1","3.6.4-2","3.6.5-0.1","3.6.5-0.1~deb13u1","3.6.6-0.1","3.6.7-2","3.6.7-3"]},{"source":"osv","ecosystem":"Debian:13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.4-2","3.6.5-0.1","3.6.5-0.1~deb13u1","3.6.6-0.1","3.6.7-2","3.6.7-3"]},{"source":"osv","ecosystem":"Debian:14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-2"}]}],"versions":["3.6.4-2","3.6.5-0.1","3.6.5-0.1~deb13u1","3.6.6-0.1"]},{"source":"osv","ecosystem":"Mageia:10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-1.mga10"}]}],"bundled":17},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.1.2-1","2.2.0-1","2.2.1-1","2.2.1-2","2.2.1-2ubuntu0.1","2.2.1-2ubuntu0.2","2.2.1-2ubuntu0.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.5.1-1ubuntu1","2.6.0-1","2.7.0-2","2.8.0-1","2.8.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.2-1","2.16.3-1","2.16.4-1ubuntu2","2.16.4-1ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.9-0.1ubuntu1","2.16.11-0.1ubuntu1","2.16.11-0.3","2.28.0-1","2.28.0-1build1","2.28.0-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.28.3-1","2.28.6-1ubuntu1","2.28.7-1ubuntu1","2.28.7-1.1ubuntu1","2.28.8-1","2.28.8-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.5-0.1ubuntu2","3.6.6-0.1ubuntu1","3.6.7-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2-3ubuntu1","3.6.5-0.1ubuntu1","3.6.5-0.1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.7-1.1"}]}],"bundled":16}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2026-35336","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0375.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35972","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3BALMLPIK3FBKPIGK5RZX3VUWR2QCCGQ/","tags":["web"]},{"url":"https://github.com/Mbed-TLS/mbedtls/releases#release-mbedtls-3.6.7","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-35336","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-35336","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-25832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-35336","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-49300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50579","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50580","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50581","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50583","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50585","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50586","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-50713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-54441","tags":["web"]}],"sources":{"osv":[{"id":"DEBIAN-CVE-2026-35336","status":"published","published":"2026-07-22T06:48:20.5820779Z","modified":"2026-09-01T15:06:02.08168747Z","updated_at":"2026-11-02T15:45:54.587575Z"},{"id":"MGASA-2026-0375","title":"Updated mbedtls packages fix security vulnerabilities","description":"TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised\ngroup. (CVE-2026-25832)\nPossible buffer overflow in mbedtls_ecdh_calc_secret(). (CVE-2026-35336)\nX.509 CA bit forgery via invalid basicConstraints extension.\n(CVE-2026-49300)\nUse-after-free in mbedtls_pkcs7_free() when reusing a PKCS7 context.\n(CVE-2026-50579)\nRemote buffer overflow in TLS 1.2 ECDHE-PSK client handshake.\n(CVE-2026-50580)\nExtended master secret calculation failure ignored. (CVE-2026-50581)\nA 1-byte buffer overread when parsing a malformed ECC public key in the\nPK module. (CVE-2026-50583)\nChaCha20 counter overflow can reuse keystream. (CVE-2026-50584)\nIncomplete context reset in mbedtls_ssl_session_reset().\n(CVE-2026-50585)\nA potential information disclosure in TLS 1.2 servers using session\ntickets. If the session ticket write callback failed without setting the\nlifetime output parameter, Mbed TLS could send 4 bytes of uninitialized\nstack memory to the peer in the NewSessionTicket message.\n(CVE-2026-50586)\nTiming side-channel in RSA PKCS#1 v1.5 decryption. (CVE-2026-50587)\nOut-of-bounds read in TLS 1.2 EC J-PAKE ServerKeyExchange parsing.\n(CVE-2026-50588)\nIgnored TLS 1.3 resumption secret derivation error. (CVE-2026-50640)\nHeap corruption with early renegotiation after corrupted record in DTLS.\n(CVE-2026-50713)\nSide channel leak in ECC optimized modp. (CVE-2026-54435)\nSignature algorithm restrictions not enforced on certificate chain.\n(CVE-2026-54441)\nA random generator fault can compromise TLS data integrity.\n(CVE-2026-73064)\n","status":"published","published":"2026-09-04T17:53:22Z","modified":"2026-09-04T18:00:03.366057546Z","updated_at":"2026-11-02T15:49:43.795591Z"},{"id":"openSUSE-SU-2026:11267-1","title":"libeverest-3.6.7-1.1 on GA media","description":"These are all security issues fixed in the libeverest-3.6.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-14T00:00:00Z","modified":"2026-07-15T10:00:14.51139588Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"UBUNTU-CVE-2026-35336","description":"[Unknown description]","status":"published","published":"2026-07-23T00:00:00Z","modified":"2026-10-17T12:58:12.120858117Z","updated_at":"2026-11-02T16:56:16.686388Z"}]}}