mbedtls vulnerabilities (Alpine)
37 vulnerabilities.
-
mbedtlsAlpine In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts... 3.7 Low -
mbedtlsAlpine Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number... 7.7 High -
mbedtlsAlpine Mbed TLS v3.3.0 up to 3.6.5 and 4.0.0 allows Algorithm Downgrade. 6.5 Medium -
mbedtlsAlpine Mbed TLS 3.5.0 to 3.6.5 fixed in 3.6.6 and 4.1.0 has a buffer overflow in the x509_inet_pton_ipv6... 7.5 High -
mbedtlsAlpine Mbed TLS through 3.6.4 has an Observable Timing Discrepancy. 5.3 Medium -
mbedtlsAlpine Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct... 6.2 Medium -
mbedtlsAlpine In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding... 4.0 Medium -
mbedtlsAlpine Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can... 4.0 Medium -
mbedtlsAlpine Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are... 8.9 High -
mbedtlsAlpine Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in... 4.8 Medium -
mbedtlsAlpine Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations... 7.8 High -
mbedtlsAlpine In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_import_public_key does not check that the input buffer... 4.8 Medium -
mbedtlsAlpine In MbedTLS 3.3.0 before 3.6.4, mbedtls_lms_verify may accept invalid signatures if hash... 4.9 Medium -
mbedtlsAlpine Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or... 5.4 Medium -
mbedtlsAlpine Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have... 5.4 Medium -
mbedtlsAlpine Mbed TLS 3.5.x through 3.6.x before 3.6.2 has a buffer underrun in pkwrite when writing an opaque... 9.8 Critical -
mbedtlsAlpine An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables... 9.8 Critical -
mbedtlsAlpine An issue was discovered in Mbed TLS 3.6 before 3.6.1. A stack buffer overflow in... 9.8 Critical -
mbedtlsAlpine An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user... 5.1 Medium -
mbedtlsAlpine An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and... 8.2 High -
mbedtlsAlpine Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows... 7.5 High -
mbedtlsAlpine An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing... 5.5 Medium -
mbedtlsAlpine Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. 7.5 High -
mbedtlsAlpine An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,... 9.1 Critical -
mbedtlsAlpine Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by... 9.8 Critical -
mbedtlsAlpine A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted... 5.5 Medium -
mbedtlsAlpine An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that... 4.7 Medium -
mbedtlsAlpine The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1... 4.7 Medium -
mbedtlsAlpine Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,... 5.3 Medium -
mbedtlsAlpine Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker... 4.7 Medium -
mbedtlsAlpine ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial... 4.7 Medium -
mbedtlsAlpine ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve... 5.9 Medium -
mbedtlsAlpine In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK... 9.8 Critical -
mbedtlsAlpine ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension... 9.8 Critical -
mbedtlsAlpine ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute... 9.8 Critical -
mbedtlsAlpine ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows... 8.1 High -
mbedtlsAlpine An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code... 8.1 High