Поиск уязвимостей
Количество 29
Количество 29
CVE-2025-27809
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.
CVE-2025-27809
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.
CVE-2025-27809
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.
CVE-2025-27809
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, acce ...
ALT-PU-2021-2163
ALT-PU-2021-2163: package `mbedtls` update to version 3.0.0-alt1
GHSA-vvqm-mmw4-qwg5
Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays.
GHSA-76fv-m4gp-q47j
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.
BDU:2025-06869
Уязвимость функции mbedtls_ssl_set_hostname программного обеспечения Mbed TLS, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2025-06868
Уязвимость реализации протокола TLS программного обеспечения Mbed TLS, позволяющая нарушителю проводить атаки типа "человек по середине"
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-27809 Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
 | CVE-2025-27809 Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
 | CVE-2025-27809 Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname. | 0% Низкий | около 1 года назад | |
| CVE-2025-27809 Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, acce ... | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| ALT-PU-2021-2163 ALT-PU-2021-2163: package `mbedtls` update to version 3.0.0-alt1 | CVSS3: 9.8 | больше 5 лет назад | |
| GHSA-vvqm-mmw4-qwg5 Mbed TLS before 2.28.10 and 3.x before 3.6.3, in some cases of failed memory allocation or hardware errors, uses uninitialized stack memory to compose the TLS Finished message, potentially leading to authentication bypasses such as replays. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| GHSA-76fv-m4gp-q47j Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
 | BDU:2025-06869 Уязвимость функции mbedtls_ssl_set_hostname программного обеспечения Mbed TLS, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| BDU:2025-06868 Уязвимость реализации протокола TLS программного обеспечения Mbed TLS, позволяющая нарушителю проводить атаки типа "человек по середине" | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу