Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
arm mbed tls vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2018-9989
ARM mbed TLS prior to 2.1.11, prior to 2.7.2, and prior to 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.
Arm Mbed Tls 2.8.0
Arm Mbed Tls
Debian Debian Linux 8.0
Debian Debian Linux 9.0
4.3
CVSSv2
CVE-2020-36477
An issue exists in Mbed TLS prior to 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of mbedtls_x509_crt_verify) with the actual certificate name is mishandled: when the subjecAltName extension is present, the expected name i...
Arm Mbed Tls
4.3
CVSSv2
CVE-2020-36425
An issue exists in Arm Mbed TLS prior to 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.
Arm Mbed Tls
Debian Debian Linux 10.0
4.3
CVSSv2
CVE-2020-10941
Arm Mbed TLS prior to 2.16.5 allows malicious users to obtain sensitive information (an RSA private key) by measuring cache usage during an import.
Arm Mbed Crypto
Arm Mbed Tls
Fedoraproject Fedora 31
Fedoraproject Fedora 32
Debian Debian Linux 10.0
4.3
CVSSv2
CVE-2018-0497
ARM mbed TLS prior to 2.12.0, prior to 2.7.5, and prior to 2.1.14 allows remote malicious users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 ...
Arm Mbed Tls
Debian Debian Linux 8.0
Debian Debian Linux 9.0
4
CVSSv2
CVE-2021-24119
In Trusted Firmware Mbed TLS 2.24.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) malicious users to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environme...
Arm Mbed Tls
Fedoraproject Fedora 33
Fedoraproject Fedora 34
Debian Debian Linux 9.0
Debian Debian Linux 10.0
2.6
CVSSv2
CVE-2019-16910
Arm Mbed TLS prior to 2.19.0 and Arm Mbed Crypto prior to 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an malicious user to recover a private key via side-channel attacks if a victim signs the same message many t...
Arm Mbed Crypto
Arm Mbed Tls
Fedoraproject Fedora 29
Fedoraproject Fedora 30
Fedoraproject Fedora 31
Debian Debian Linux 10.0
2.1
CVSSv2
CVE-2020-16150
A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS up to and including 2.23.0 allows an malicious user to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length...
Arm Mbed Tls
Fedoraproject Fedora 31
Fedoraproject Fedora 32
Fedoraproject Fedora 33
Debian Debian Linux 10.0
1.9
CVSSv2
CVE-2020-36424
An issue exists in Arm Mbed TLS prior to 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack against generation of base blinding/unblinding values.
Arm Mbed Tls
Debian Debian Linux 10.0
1.9
CVSSv2
CVE-2020-10932
An issue exists in Arm Mbed TLS prior to 2.16.6 and 2.7.x prior to 2.7.15. An attacker that can get precise enough side-channel measurements can recover the long-term ECDSA private key by (1) reconstructing the projective coordinate of the result of scalar multiplication by explo...
Arm Mbed Tls
Fedoraproject Fedora 31
Fedoraproject Fedora 32
Debian Debian Linux 10.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
TCP
CVE-2024-4577
CVE-2024-2695
CVE-2024-31870
injection
CVE-2024-3813
arbitrary code
CVE-2024-27801
CVE-2024-30120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
NEXT »