mbedtls-2 vulnerabilities (openSUSE)
21 vulnerabilities.
-
mbedtls-2openSUSE Mbed TLS through 3.6.4 has an Observable Timing Discrepancy. 5.3 Medium -
mbedtls-2openSUSE Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations... 7.8 High -
mbedtls-2openSUSE Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or... 5.4 Medium -
mbedtls-2openSUSE Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have... 5.4 Medium -
mbedtls-2openSUSE An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user... 5.1 Medium -
mbedtls-2openSUSE An issue was discovered in Mbed TLS 2.18.0 through 2.28.x before 2.28.8 and 3.x before 3.6.0, and... 8.2 High -
mbedtls-2openSUSE An issue was discovered in Mbed TLS 2.x before 2.28.7 and 3.x before 3.5.2. There was a timing... 5.5 Medium -
mbedtls-2openSUSE An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap... 9.8 Critical -
mbedtls-2openSUSE An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.2.0. In some configurations,... 9.1 Critical -
mbedtls-2openSUSE In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt... 7.5 High -
mbedtls-2openSUSE In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding... 4.9 Medium -
mbedtls-2openSUSE Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker... 4.7 Medium -
mbedtls-2openSUSE ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension... 9.8 Critical -
mbedtls-2openSUSE ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute... 9.8 Critical -
mbedtls-2openSUSE ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows... 8.1 High -
mbedtls-2openSUSE An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code... 8.1 High -
mbedtls-2openSUSE Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2... 5.9 Medium -
mbedtls-2openSUSE Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3... 6.8 Medium -
mbedtls-2openSUSE The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x... 7.5 High -
mbedtls-2openSUSE Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a... 7.8 High -
mbedtls-2openSUSE PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote... 5.0 Medium