mbedtls vulnerabilities (Debian)
79 vulnerabilities.
mbedtlsDebianA Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the...7.5 HighmbedtlsDebianMbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by...9.8 CriticalmbedtlsDebianAn issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS)....7.5 HighmbedtlsDebianAn issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when...5.9 MediummbedtlsDebianAn issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS)....7.5 HighmbedtlsDebianAn issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS)....7.5 HighmbedtlsDebianAn issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer...7.5 HighmbedtlsDebianAn issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check...5.3 MediummbedtlsDebianAn issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for...4.7 MediummbedtlsDebianAn issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext...7.5 HighmbedtlsDebianAn issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC...5.3 MediummbedtlsDebianAn issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular...5.3 MediummbedtlsDebianIn Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding...4.9 MediummbedtlsDebianA Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted...5.5 MediummbedtlsDebianAn issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that...4.7 MediummbedtlsDebianArm Mbed TLS before 2.6.15 allows attackers to obtain sensitive information (an RSA private key)...5.9 MediummbedtlsDebianThe ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1...4.7 MediummbedtlsDebianArm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,...5.3 MediummbedtlsDebianArm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker...4.7 MediummbedtlsDebianARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial...4.7 MediummbedtlsDebianARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve...5.9 MediummbedtlsDebianARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed...7.5 HighmbedtlsDebianARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in...7.5 HighmbedtlsDebianARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in...7.5 HighmbedtlsDebianIn ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK...9.8 CriticalmbedtlsDebianARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension...9.8 CriticalmbedtlsDebianARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute...9.8 CriticalmbedtlsDebianARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows...8.1 HighmbedtlsDebianAn exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code...8.1 High