Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qc26-g9mm-wmmf

Опубликовано: 04 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

EPSS

Процентиль: 7%
0.00029
Низкий

7.8 High

CVSS3

Дефекты

CWE-733

Связанные уязвимости

CVSS3: 7.8
ubuntu
4 месяца назад

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

CVSS3: 7.8
nvd
4 месяца назад

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

msrc
2 месяца назад

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certain compiler optimizations occur. An attacker may be able to extract an AES key from a multithreaded program, or perform a GCM forgery.

CVSS3: 7.8
debian
4 месяца назад

Mbed TLS before 3.6.4 has a race condition in AESNI detection if certa ...

CVSS3: 7.8
fstec
4 месяца назад

Уязвимость функции mbedtls_aesni_has_support() программного обеспечения Mbed TLS, позволяющая нарушителю оказать воздействие на целостность и конфиденциальность защищаемой информации

EPSS

Процентиль: 7%
0.00029
Низкий

7.8 High

CVSS3

Дефекты

CWE-733