Описание
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 3.6.5-0.1ubuntu2 |
| esm-apps-legacy/xenial | not-affected | code not present |
| esm-apps/bionic | not-affected | code not present |
| esm-apps/focal | not-affected | code not present |
| esm-apps/jammy | not-affected | code not present |
| esm-apps/noble | not-affected | code not present |
| esm-apps/resolute | needed | |
| esm-apps/xenial | not-affected | code not present |
| jammy | not-affected | code not present |
| noble | not-affected | code not present |
Показывать по
4 Medium
CVSS3
Связанные уязвимости
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in ...
In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal allows an attacker to recover the plaintext when PKCS#7 padding mode is used.
Уязвимость программного обеспечения Mbed TLS, связанная с использованием скрытых временных каналов для передачи данных, позволяющая нарушителю восстановить открытый текст
4 Medium
CVSS3