Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cvp8-hm87-hr8x

Опубликовано: 05 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.1

Описание

An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used. Unlike previously documented, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not cause the PSA subsystem to use HMAC_DRBG: it uses HMAC_DRBG only when MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG and MBEDTLS_CTR_DRBG_C are disabled.

An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used. Unlike previously documented, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not cause the PSA subsystem to use HMAC_DRBG: it uses HMAC_DRBG only when MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG and MBEDTLS_CTR_DRBG_C are disabled.

EPSS

Процентиль: 2%
0.00017
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-696

Связанные уязвимости

CVSS3: 5.1
ubuntu
10 месяцев назад

An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used. Unlike previously documented, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not cause the PSA subsystem to use HMAC_DRBG: it uses HMAC_DRBG only when MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG and MBEDTLS_CTR_DRBG_C are disabled.

CVSS3: 5.1
nvd
10 месяцев назад

An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1, in which the user-selected algorithm is not used. Unlike previously documented, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not cause the PSA subsystem to use HMAC_DRBG: it uses HMAC_DRBG only when MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG and MBEDTLS_CTR_DRBG_C are disabled.

CVSS3: 5.1
msrc
7 месяцев назад

Описание отсутствует

CVSS3: 5.1
debian
10 месяцев назад

An issue was discovered in Mbed TLS before 2.28.9 and 3.x before 3.6.1 ...

CVSS3: 5.1
redos
9 месяцев назад

Уязвимость mbedtls

EPSS

Процентиль: 2%
0.00017
Низкий

5.1 Medium

CVSS3

Дефекты

CWE-696