MbedTLS_jll vulnerabilities (Julia)
42 vulnerabilities.
-
MbedTLS_jllJulia An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.... 9.8 Critical -
MbedTLS_jllJulia An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is... 9.1 Critical -
MbedTLS_jllJulia An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1... 6.7 Medium -
MbedTLS_jllJulia Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number... 7.7 High -
MbedTLS_jllJulia In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB... 5.1 Medium -
MbedTLS_jllJulia Mbed TLS through 3.6.4 has an Observable Timing Discrepancy. 5.3 Medium -
MbedTLS_jllJulia Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct... 6.2 Medium -
MbedTLS_jllJulia Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtls_asn1_store_named_data can... 4.0 Medium -
MbedTLS_jllJulia Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are... 8.9 High -
MbedTLS_jllJulia Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in... 4.8 Medium -
MbedTLS_jllJulia Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations... 7.8 High -
MbedTLS_jllJulia Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or... 5.4 Medium -
MbedTLS_jllJulia Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have... 5.4 Medium -
MbedTLS_jllJulia An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user... 5.1 Medium -
MbedTLS_jllJulia An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and... 8.2 High -
MbedTLS_jllJulia Integer Overflow vulnerability in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2, allows... 7.5 High -
MbedTLS_jllJulia An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing... 5.5 Medium -
MbedTLS_jllJulia Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow. 7.5 High -
MbedTLS_jllJulia Use of a Broken or Risky Cryptographic Algorithm in the function mbedtls_mpi_exp_mod() in lignum... 4.7 Medium -
MbedTLS_jllJulia An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap... 9.8 Critical -
MbedTLS_jllJulia An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access... 5.3 Medium -
MbedTLS_jllJulia An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,... 9.1 Critical -
MbedTLS_jllJulia A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the... 7.5 High -
MbedTLS_jllJulia In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption... 7.5 High -
MbedTLS_jllJulia In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt... 7.5 High -
MbedTLS_jllJulia Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by... 9.8 Critical -
MbedTLS_jllJulia An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS).... 7.5 High -
MbedTLS_jllJulia An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when... 5.9 Medium -
MbedTLS_jllJulia An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS).... 7.5 High -
MbedTLS_jllJulia An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS).... 7.5 High -
MbedTLS_jllJulia An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer... 7.5 High -
MbedTLS_jllJulia An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check... 5.3 Medium -
MbedTLS_jllJulia An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for... 4.7 Medium -
MbedTLS_jllJulia An issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext... 7.5 High -
MbedTLS_jllJulia An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC... 5.3 Medium -
MbedTLS_jllJulia An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular... 5.3 Medium -
MbedTLS_jllJulia In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding... 4.9 Medium -
MbedTLS_jllJulia A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted... 5.5 Medium -
MbedTLS_jllJulia An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that... 4.7 Medium -
MbedTLS_jllJulia Arm Mbed TLS before 2.6.15 allows attackers to obtain sensitive information (an RSA private key)... 5.9 Medium -
MbedTLS_jllJulia The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1... 4.7 Medium -
MbedTLS_jllJulia Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,... 5.3 Medium