Back to search
CVE-2021-45450
Published: Dec 21, 2021
Modified: Aug 4, 2024
PUBLISHED
Description
In Mbed TLS before 2.28.0 and 3.x before 3.1.0, psa_cipher_generate_iv and psa_cipher_encrypt allow policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
FEDORA-2022-ff582c5b0d
vendor-advisory
FEDORA-2022-1dd9dc5140
vendor-advisory
GLSA-202301-08
vendor-advisory
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now