Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qc26-g9mm-wmmf

Опубликовано: 04 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

EPSS

Процентиль: 4%
0.0002
Низкий

7.8 High

CVSS3

Дефекты

CWE-733

Связанные уязвимости

CVSS3: 7.8
ubuntu
7 месяцев назад

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

CVSS3: 7.8
nvd
7 месяцев назад

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

msrc
5 месяцев назад

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

CVSS3: 7.8
debian
7 месяцев назад

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certa ...

CVSS3: 7.8
fstec
7 месяцев назад

Уязвимость функции mbedtls_aesni_has_support() программного обеспечения Mbed TLS, позволяющая нарушителю оказать воздействие на целостность и конфиденциальность защищаемой информации

EPSS

Процентиль: 4%
0.0002
Низкий

7.8 High

CVSS3

Дефекты

CWE-733