Mbed Crypto

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-10941 Mar 24, 20:15 MEDIUM This Month

Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Debian Debian Linux Fedora Mbed Tls +3

NVD

CVSS 3.1

5.9

EPSS

1.6%

CVE-2019-16910 Sep 26, 13:15 MEDIUM PATCH This Month

Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Debian Debian Linux Fedora Mbed Tls +4

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

0.7%

CVE-2024-28960 May 27, 22:00 HIGH This Week

Alpine Linux: mbedtls fixed in 2.28.8-r0

Authentication Bypass Fedora Mbed Tls Mbed Crypto Arm +2

NVD GitHub VulDB

CVSS 3.1

8.2

EPSS

0.1%

CVE-2020-10941

EPSS 2% CVSS 5.9

MEDIUM This Month

Information Disclosure Debian Debian Linux +5

NVD

CVE-2019-16910

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Information Disclosure Debian Debian Linux +6

NVD GitHub VulDB

CVE-2024-28960

EPSS 0% CVSS 8.2

HIGH This Week

Alpine Linux: mbedtls fixed in 2.28.8-r0

Authentication Bypass Fedora Mbed Tls +4

NVD GitHub VulDB