55 matches found
Astra Linux – Vulnerability in mbedtls
A issue was discovered in Mbed TLS 3.5.1. There is a persistent handshake denial if a client sends a TLS 1.3 ClientHello without extensions...
Astra Linux – Vulnerability in mbedtls
A issue was discovered in Arm Mbed TLS before version 2.23.0. A remote attacker can retrieve plaintext data because a certain countermeasure, known as “Lucky 13,” does not properly handle the case where a hardware accelerator is involved...
Astra Linux – Vulnerability in mbedtls
In Mbed TLS versions prior to 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uninitialized stack memory was used to construct the TLS Finished message. This could potentially lead to authentication bypasses, such as replay attacks...
Linux Distros Unpatched Vulnerability : CVE-2026-34871
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseudo-Random Number...
Linux Distros Unpatched Vulnerability : CVE-2026-34875
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0. A buffer overflow can occur in public key export for FFDH keys. CVE-2026-34875 Note...
Linux Distros Unpatched Vulnerability : CVE-2026-34874
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mbed TLS through 3.6.5 and 4.x through 4.0.0. There is a NULL pointer dereference in distinguished name parsing that allows an attack...
EUVD-2026-17999
Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator PRNG...
PT-2025-42819
Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 3.6.5 Description The software contains a flaw that could allow a local attacker to conduct a timing attack against specific RSA operations. Additionally, direct calls to the mbedtls mpi mod inv and mbedtls mpi gcd...
Mbed TLS 安全漏洞
Mbed TLS is an open source, portable, easy to use, readable and flexible SSL library from Mbed TLS Open Source. A security vulnerability exists in Mbed TLS versions prior to 3.6.5 that stems from a local timing attack and a direct call to mbedtlsmpimodinv or mbedtlsmpigcd, which could lead to...
EUVD-2017-5547
Malware in sbrugna...
EUVD-2018-1311
Malware in sbrugna...
EUVD-2020-23962
Malware in sbrugna...
EUVD-2020-23964
Malware in sbrugna...
EUVD-2022-49201
Malicious code in bioql PyPI...
EUVD-2022-49202
Malicious code in bioql PyPI...
EUVD-2022-38299
Malicious code in bioql PyPI...
EUVD-2021-32221
Malicious code in bioql PyPI...
EUVD-2021-31547
Malicious code in bioql PyPI...