Every CVESearch/Get API key

CVE-2021-35409

Security update for mbedtls

No score

CVE-2021-35409 is a vulnerability with no CVSS score yet in mbedtls, published December 22, 2022. No source lists public exploit code. No source names a fixed version.

What does this mean?
Severity
UnratedNo CVSS score yet
Exploit chance
UnscoredNo EPSS score yet
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

This update for mbedtls fixes the following issues:

  • CVE-2022-35409: Fixed buffer overread in DTLS ClientHello parsing (boo#1201581).

Affected packages

Affected packages
PackageAffectedFixed
mbedtls
SUSE:Package Hub 15 SP3
From an advisory covering 2 CVEs
before 2.16.9-bp153.2.8.1
2.16.9-bp153.2.8.1
mbedtls
openSUSE:Leap 15.3
From an advisory covering 2 CVEs
before 2.16.9-bp153.2.8.1
2.16.9-bp153.2.8.1

What each source reports

OSVopenSUSE-SU-2022:10247-1No score

Security update for mbedtls

This update for mbedtls fixes the following issues:

  • CVE-2022-35409: Fixed buffer overread in DTLS ClientHello parsing (boo#1201581).
Record
openSUSE-SU-2022:10247-1
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open