Sensitive Information Disclosure

2024-04-0312:15:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

sensitive information disclosure

vulnerability

shared memory

software

information security

psa crypto api

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

JSON

libmbedtls.so is vulnerable to Sensitive Information Disclosure. The vulnerability is due to inadequate handling of shared memory within the PSA Crypto API, potentially leading to information disclosure.

CPENameOperatorVersion
libmbedtls.sole2.28.7-2.28.7-1.el8.x86_64.debug
mbedtls:3.18eq2.28.4-r0
mbedtls:3.18eq2.28.5-r0
mbedtls:3.18eq2.28.7-r0
mbedtls:3.18eq2.28.3-r1
mbedtls:edgeeq2.28.3-r2
mbedtls:edgeeq2.28.3-r3
mbedtls:edgeeq2.28.3-r0
mbedtls:edgeeq2.28.4-r0
mbedtls:edgeeq2.16.10-r1

Name	Operator	Version
libmbedtls.so	le	2.28.7-2.28.7-1.el8.x86_64.debug
mbedtls:3.18	eq	2.28.4-r0
mbedtls:3.18	eq	2.28.5-r0
mbedtls:3.18	eq	2.28.7-r0
mbedtls:3.18	eq	2.28.3-r1
mbedtls:edge	eq	2.28.3-r2
mbedtls:edge	eq	2.28.3-r3
mbedtls:edge	eq	2.28.3-r0
mbedtls:edge	eq	2.28.4-r0
mbedtls:edge	eq	2.16.10-r1