Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mbed tls vulnerabilities and exploits
(subscribe to this query)
169
VMScore
CVE-2020-36424
An issue exists in Arm Mbed TLS prior to 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack against generation of base blinding/unblinding values.
Arm Mbed Tls
Debian Debian Linux 10.0
383
VMScore
CVE-2020-36425
An issue exists in Arm Mbed TLS prior to 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.
Arm Mbed Tls
Debian Debian Linux 10.0
445
VMScore
CVE-2020-36426
An issue exists in Arm Mbed TLS prior to 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte).
Arm Mbed Tls
Debian Debian Linux 10.0
383
VMScore
CVE-2020-10941
Arm Mbed TLS prior to 2.16.5 allows malicious users to obtain sensitive information (an RSA private key) by measuring cache usage during an import.
Arm Mbed Crypto
Arm Mbed Tls
Fedoraproject Fedora 31
Fedoraproject Fedora 32
Debian Debian Linux 10.0
169
VMScore
CVE-2019-18222
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS up to and including 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local malicious user to recover the private key via side-channel attacks.
Arm Mbed Tls
Arm Mbed Crypto
Fedoraproject Fedora 30
Fedoraproject Fedora 31
Debian Debian Linux 10.0
NA
CVE-2022-46392
An issue exists in Mbed TLS prior to 2.28.2 and 3.x prior to 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim perform...
Arm Mbed Tls
Fedoraproject Fedora 36
Fedoraproject Fedora 37
445
VMScore
CVE-2021-45451
In Mbed TLS prior to 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
Arm Mbed Tls
Fedoraproject Fedora 36
Fedoraproject Fedora 37
NA
CVE-2022-46393
An issue exists in Mbed TLS prior to 2.28.2 and 3.x prior to 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and MBEDTLS_SSL_CID_IN_LEN_MAX > 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.
Arm Mbed Tls
Fedoraproject Fedora 36
Fedoraproject Fedora 37
231
VMScore
CVE-2019-16910
Arm Mbed TLS prior to 2.19.0 and Arm Mbed Crypto prior to 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an malicious user to recover a private key via side-channel attacks if a victim signs the same message many t...
Arm Mbed Crypto
Arm Mbed Tls
Fedoraproject Fedora 29
Fedoraproject Fedora 30
Fedoraproject Fedora 31
Debian Debian Linux 10.0
668
VMScore
CVE-2017-18187
In ARM mbed TLS prior to 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in library/ssl_srv.c.
Arm Mbed Tls
Debian Debian Linux 9.0
Debian Debian Linux 8.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-40673
CVE-2024-36674
CVE-2024-27348
unspecified
CVE-2024-24919
CVE-2024-4870
malicious code
CVE-2024-2019
hard-coded
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »