Lucene search
+L

1307 matches found

OSV
OSV
•added 2021/12/21 7:15 a.m.•34 views

CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.3AI score
SaveExploits0References5
NVD
NVD
•added 2021/12/21 7:15 a.m.•28 views

CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS0.01187EPSS
SaveExploits0References5
NVD
NVD
•added 2021/12/21 7:15 a.m.•22 views

CVE-2021-45451

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS0.00923EPSS
SaveExploits0References3
Prion
Prion
•added 2021/12/21 7:15 a.m.•30 views

Buffer overflow

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

5CVSS7.6AI score0.01187EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
•added 2021/12/21 7:15 a.m.•37 views

CVE-2021-45451

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.2AI score0.00923EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/21 7:15 a.m.•13 views

CVE-2021-45451

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.3AI score0.00923EPSS
SaveExploits0References6
Prion
Prion
•added 2021/12/21 7:15 a.m.•30 views

Buffer overflow

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

5CVSS7.5AI score0.00923EPSS
SaveExploits0References3Affected Software2
UbuntuCve
UbuntuCve
•added 2021/12/21 7:15 a.m.•39 views

CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.2AI score0.01187EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/21 7:15 a.m.•14 views

UBUNTU-CVE-2021-45451

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.2AI score0.00923EPSS
SaveExploits0References3
OSV
OSV
•added 2021/12/21 7:15 a.m.•13 views

UBUNTU-CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS5.9AI score0.01187EPSS
SaveExploits0References4
CVE
CVE
•added 2021/12/21 12:00 a.m.•106 views

CVE-2021-45451

CVE-2021-45451 affects Mbed TLS prior to 3.1.0. The flaw is in psa_aead_generate_nonce, which can enable policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted app. The vulnerability is tied to how nonces are generated for AEAD operations...

7.5CVSS7.4AI score0.00923EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2021/12/21 12:00 a.m.•21 views

ARM mbed TLS 加密问题漏洞

ARM mbed TLS is a product from ARM UK that provides secure communication and encryption capabilities for mbed products. A security vulnerability exists in Mbed TLS versions prior to 3.1.0 that stems from psaaeadgeneratenonce allows policy bypass or oracle-based decryption that can be accessed by...

7.5CVSS7.2AI score0.00923EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2021/12/21 12:00 a.m.•32 views

CVE-2021-45451

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.8AI score0.00923EPSS
SaveExploits0References3
Mend
Mend
•added 2021/12/21 12:00 a.m.•3 views

CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

8.7CVSS0.01187EPSS
SaveExploits0References7
CVE
CVE
•added 2021/12/21 12:00 a.m.•116 views

CVE-2021-45450

In Mbed TLS, versions before 2.28.0 and before 3.1.0 have a vulnerability in PSA cipher functions where psa_cipher_generate_iv and psa_cipher_encrypt can expose policy bypass or oracle-based decryption if the output buffer is accessible to an untrusted application. The issue affects older 2.x and...

7.5CVSS7.5AI score0.01187EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2021/12/21 12:00 a.m.•18 views

ARM mbed TLS加密问题漏洞

ARM mbed TLS is a product from ARM UK that provides secure communication and encryption capabilities for mbed products. A security vulnerability exists in Mbed TLS versions prior to 2.28.0 and 3.0, which stems from the fact that psaciphergenerateiv and psacipherencrypt allow policy bypass or...

7.5CVSS7.2AI score0.01187EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2021/12/21 12:00 a.m.•53 views

CVE-2021-45450

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.9AI score0.01187EPSS
SaveExploits0References5
Mend
Mend
•added 2021/12/21 12:00 a.m.•1 views

CVE-2021-45451

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

8.7CVSS0.00923EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/21 12:00 a.m.•6 views

CVE-2021-45450: Use of a Broken or Risky Cryptographic Algorithm

In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psaciphergenerateiv and psacipherencrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS6AI score0.01187EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2021/12/21 12:00 a.m.•59 views

CVE-2021-45451

In Mbed TLS before 3.1.0, psaaeadgeneratenonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application...

7.5CVSS7.6AI score0.00923EPSS
SaveExploits0
Rows per page
Query Builder