Описание
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
Ссылки
- PatchRelease NotesThird Party Advisory
- PatchRelease NotesThird Party Advisory
Уязвимые конфигурации
Одно из
EPSS
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass ...
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
ALT-PU-2022-2561: package `mbedtls` update to version 3.2.1-alt1
ALT-PU-2021-3553: package `mbedtls` update to version 3.1.0-alt1
EPSS
7.5 High
CVSS3
5 Medium
CVSS2