Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
arm mbed tls 2.1.2 vulnerabilities and exploits
(subscribe to this query)
605
VMScore
CVE-2017-2784
An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS prior to 1.3.19, 2.x prior to 2.1.7, and 2.4.x prior to 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a st...
Arm Mbed Tls 2.1.4
Arm Mbed Tls 2.1.5
Arm Mbed Tls 2.1.6
Arm Mbed Tls 2.1.2
Arm Mbed Tls 2.1.3
Arm Mbed Tls 2.4.0
Arm Mbed Tls 2.0.0
Arm Mbed Tls
Arm Mbed Tls 2.1.0
Arm Mbed Tls 2.1.1
605
VMScore
CVE-2017-14032
ARM mbed TLS prior to 1.3.21 and 2.x prior to 2.1.9, if optional authentication is configured, allows remote malicious users to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases ...
Arm Mbed Tls 1.3.12
Arm Mbed Tls 1.3.13
Arm Mbed Tls 1.3.21
Arm Mbed Tls 2.1.9
Arm Mbed Tls 1.3.10
Arm Mbed Tls 1.3.11
Arm Mbed Tls 1.3.18
Arm Mbed Tls 1.3.19
Arm Mbed Tls 2.4.2
Arm Mbed Tls 2.5.1
Arm Mbed Tls 2.1.2
Arm Mbed Tls 2.1.3
Arm Mbed Tls 2.6.2
Arm Mbed Tls 2.1.7
Arm Mbed Tls 2.1.4
Arm Mbed Tls 2.1.5
Arm Mbed Tls 1.3.16
Arm Mbed Tls 1.3.17
Arm Mbed Tls 2.3.0
Arm Mbed Tls 2.4.0
Arm Mbed Tls 2.1.0
Arm Mbed Tls 2.1.1
605
VMScore
CVE-2015-8036
Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x prior to 1.3.14 and 2.x prior to 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, wh...
Arm Mbed Tls
Polarssl Polarssl
Fedoraproject Fedora 21
Debian Debian Linux 7.0
Debian Debian Linux 8.0
Opensuse Opensuse 13.2
605
VMScore
CVE-2015-5291
Heap-based buffer overflow in PolarSSL 1.x prior to 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x prior to 1.3.14 and 2.x prior to 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server...
Arm Mbed Tls
Polarssl Polarssl
Debian Debian Linux 7.0
Debian Debian Linux 8.0
Opensuse Leap 42.1
Fedoraproject Fedora 21
Fedoraproject Fedora 22
Fedoraproject Fedora 23
Opensuse Opensuse 13.2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started