Astra Linux – Vulnerability in mbedtls

There is a denial-of-service vulnerability in mbed TLS 3.0.0 and earlier versions, specifically in the mbedtlspkcs12derivation function, when the length of the input password is 0...

JLSEC-2025-217 A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivat...

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.

...

The vulnerability of the mbedtls_pkcs12_derivation function in Mbed TLS software implementations allows a attacker to cause a service failure.

The vulnerability of the mbedtlspkcs12derivation function in Mbed TLS software implementations for TLS and SSL protocols is related to errors in processing the length of the input password. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

DEBIAN-CVE-2021-43666

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

UBUNTU-CVE-2021-43666

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...