mbedtls vulnerabilities (Ubuntu)
78 vulnerabilities.
mbedtlsUbuntuMbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by...9.8 CriticalmbedtlsUbuntuAn issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS)....7.5 HighmbedtlsUbuntuAn issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when...5.9 MediummbedtlsUbuntuAn issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS)....7.5 HighmbedtlsUbuntuAn issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS)....7.5 HighmbedtlsUbuntuAn issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer...7.5 HighmbedtlsUbuntuAn issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check...5.3 MediummbedtlsUbuntuAn issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for...4.7 MediummbedtlsUbuntuAn issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext...7.5 HighmbedtlsUbuntuAn issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC...5.3 MediummbedtlsUbuntuAn issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular...5.3 MediummbedtlsUbuntuIn Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding...4.9 MediummbedtlsUbuntuA Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted...5.5 MediummbedtlsUbuntuAn issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. An attacker that...4.7 MediummbedtlsUbuntuArm Mbed TLS before 2.6.15 allows attackers to obtain sensitive information (an RSA private key)...5.9 MediummbedtlsUbuntuThe ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1...4.7 MediummbedtlsUbuntuArm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled,...5.3 MediummbedtlsUbuntuArm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker...4.7 MediummbedtlsUbuntuARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial...4.7 MediummbedtlsUbuntuARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve...5.9 MediummbedtlsUbuntuARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed...7.5 HighmbedtlsUbuntuARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in...7.5 HighmbedtlsUbuntuARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in...7.5 HighmbedtlsUbuntuIn ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK...9.8 CriticalmbedtlsUbuntuARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension...9.8 CriticalmbedtlsUbuntuARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute...9.8 CriticalmbedtlsUbuntuARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows...8.1 HighmbedtlsUbuntuAn exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code...8.1 High