Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-45451
7.5
HIGHCVSS v3
Published
December 21, 2021
CVSS v2
5 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
Mbed-TLS/mbedtls
GitHubAn open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
GitHubAn open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.< 3.1.0NVD
Crates.io
Docker Hub
NPM
RubyGems