Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-45450
7.5
HIGHCVSS v3
Published
December 21, 2021
CVSS v2
5 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
Mbed-TLS/mbedtls
GitHubAn open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
GitHubAn open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.= *, = 3.0.0, = 3.1.0, >= 2.22.0, < 2.28.0NVD
Crates.io
Docker Hub
NPM
RubyGems