CVE-2022-35409

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-35409

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-35409.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-35409

Related

Published

2022-07-15T14:15:09Z

Modified

2024-12-05T15:36:52.574738Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator

Summary

[none]

Details

An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLSSSLDTLSCLIENTPORTREUSE enabled and MBEDTLSSSLINCONTENTLEN less than a threshold that depends on the configuration: 258 bytes if using mbedtlssslcookiecheck, and possibly up to 571 bytes with a custom cookie check function.

References

Affected packages

Alpine:v3.16 / mbedtls

Package

Name: mbedtls
Purl: pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.1-r0

Affected versions

2.*

2.0.0-r0

2.1.2-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.3.0-r0

2.4.0-r0

2.4.1-r0

2.4.2-r0

2.5.1-r0

2.6.0-r0

2.6.1-r0

2.7.0-r0

2.11.0-r0

2.12.0-r0

2.14.1-r0

2.16.0-r0

2.16.1-r0

2.16.1-r1

2.16.2-r0

2.16.3-r0

2.16.5-r0

2.16.6-r0

2.16.8-r0

2.16.9-r0

2.16.10-r0

2.16.10-r1

2.16.12-r0

2.16.12-r1

2.28.0-r0

Alpine:v3.17 / mbedtls

Package

Name: mbedtls
Purl: pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.1-r0

Affected versions

2.*

2.0.0-r0

2.1.2-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.3.0-r0

2.4.0-r0

2.4.1-r0

2.4.2-r0

2.5.1-r0

2.6.0-r0

2.6.1-r0

2.7.0-r0

2.11.0-r0

2.12.0-r0

2.14.1-r0

2.16.0-r0

2.16.1-r0

2.16.1-r1

2.16.2-r0

2.16.3-r0

2.16.5-r0

2.16.6-r0

2.16.8-r0

2.16.9-r0

2.16.10-r0

2.16.10-r1

2.16.12-r0

2.16.12-r1

2.28.0-r0

Alpine:v3.18 / mbedtls

Package

Name: mbedtls
Purl: pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.1-r0

Affected versions

2.*

2.0.0-r0

2.1.2-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.3.0-r0

2.4.0-r0

2.4.1-r0

2.4.2-r0

2.5.1-r0

2.6.0-r0

2.6.1-r0

2.7.0-r0

2.11.0-r0

2.12.0-r0

2.14.1-r0

2.16.0-r0

2.16.1-r0

2.16.1-r1

2.16.2-r0

2.16.3-r0

2.16.5-r0

2.16.6-r0

2.16.8-r0

2.16.9-r0

2.16.10-r0

2.16.10-r1

2.16.12-r0

2.16.12-r1

2.28.0-r0

Alpine:v3.19 / mbedtls

Package

Name: mbedtls
Purl: pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.1-r0

Affected versions

2.*

2.0.0-r0

2.1.2-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.3.0-r0

2.4.0-r0

2.4.1-r0

2.4.2-r0

2.5.1-r0

2.6.0-r0

2.6.1-r0

2.7.0-r0

2.11.0-r0

2.12.0-r0

2.14.1-r0

2.16.0-r0

2.16.1-r0

2.16.1-r1

2.16.2-r0

2.16.3-r0

2.16.5-r0

2.16.6-r0

2.16.8-r0

2.16.9-r0

2.16.10-r0

2.16.10-r1

2.16.12-r0

2.16.12-r1

2.28.0-r0

Alpine:v3.20 / mbedtls

Package

Name: mbedtls
Purl: pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.1-r0

Affected versions

2.*

2.0.0-r0

2.1.2-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.3.0-r0

2.4.0-r0

2.4.1-r0

2.4.2-r0

2.5.1-r0

2.6.0-r0

2.6.1-r0

2.7.0-r0

2.11.0-r0

2.12.0-r0

2.14.1-r0

2.16.0-r0

2.16.1-r0

2.16.1-r1

2.16.2-r0

2.16.3-r0

2.16.5-r0

2.16.6-r0

2.16.8-r0

2.16.9-r0

2.16.10-r0

2.16.10-r1

2.16.12-r0

2.16.12-r1

2.28.0-r0

Alpine:v3.21 / mbedtls

Package

Name: mbedtls
Purl: pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.1-r0

Affected versions

2.*

2.0.0-r0

2.1.2-r0

2.2.0-r0

2.2.0-r1

2.2.1-r0

2.3.0-r0

2.4.0-r0

2.4.1-r0

2.4.2-r0

2.5.1-r0

2.6.0-r0

2.6.1-r0

2.7.0-r0

2.11.0-r0

2.12.0-r0

2.14.1-r0

2.16.0-r0

2.16.1-r0

2.16.1-r1

2.16.2-r0

2.16.3-r0

2.16.5-r0

2.16.6-r0

2.16.8-r0

2.16.9-r0

2.16.10-r0

2.16.10-r1

2.16.12-r0

2.16.12-r1

2.28.0-r0

Debian:11 / mbedtls

Package

Name: mbedtls
Purl: pkg:deb/debian/mbedtls?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

2.*

2.16.9-0.1

2.16.11-0.1

2.16.11-0.2

2.16.11-0.3

2.28.0-0.1

2.28.0-0.2

2.28.0-0.3

2.28.0-1

2.28.0-2

2.28.1-1

2.28.2-1

2.28.3-1

2.28.4-1

2.28.5-1

2.28.6-1

2.28.7-1

2.28.7-1.1~exp1

2.28.7-1.1

2.28.8-1

3.*

3.6.0-1

3.6.0-2

3.6.0-3

3.6.2-1

3.6.2-2

3.6.2-3

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / mbedtls

Package

Name: mbedtls
Purl: pkg:deb/debian/mbedtls?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / mbedtls

Package

Name: mbedtls
Purl: pkg:deb/debian/mbedtls?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.28.1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/armmbed/mbedtls

Affected ranges

Type: GIT
Repo: https://github.com/armmbed/mbedtls
Events: Introduced

8df2f8e7b9c7bb9390ac74bb7bace27edca81a2b

Fixed

3aef7670b78ddebf80f4ad38b9a0059d40021832

Type: GIT
Repo: https://github.com/mbed-tls/mbedtls
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

dd79db10014d85b26d11fe57218431f2e5ede6f2

Affected versions

Other

beta-oob-2

list

mbedos-2016q1-oob1

mbedos-2016q1-oob2

mbedos-2016q1-oob3

mbedos-release-15-11

mbedos-techcon-oob2

mbedos-16.*

mbedos-16.01-release

mbedos-16.03-release

mbedtls-1.*

mbedtls-1.3.10

mbedtls-1.4-dtls-preview

mbedtls-2.*

mbedtls-2.0.0

mbedtls-2.1.0

mbedtls-2.1.1

mbedtls-2.1.2

mbedtls-2.10.0

mbedtls-2.11.0

mbedtls-2.12.0

mbedtls-2.13.0

mbedtls-2.13.1

mbedtls-2.14.0

mbedtls-2.15.0

mbedtls-2.15.1

mbedtls-2.16.0

mbedtls-2.17.0

mbedtls-2.18.0

mbedtls-2.19.0

mbedtls-2.19.0d1

mbedtls-2.19.0d2

mbedtls-2.19.1

mbedtls-2.2.0

mbedtls-2.2.1

mbedtls-2.20.0

mbedtls-2.20.0d0

mbedtls-2.20.0d1

mbedtls-2.21.0

mbedtls-2.22.0

mbedtls-2.22.0d0

mbedtls-2.23.0

mbedtls-2.24.0

mbedtls-2.25.0

mbedtls-2.26.0

mbedtls-2.27.0

mbedtls-2.28.0

mbedtls-2.3.0

mbedtls-2.4.0

mbedtls-2.5.0

mbedtls-2.5.1

mbedtls-2.6.0

mbedtls-2.6.0-rc1

mbedtls-2.7.0

mbedtls-2.7.0-rc1

mbedtls-2.8.0

mbedtls-2.8.0-rc1

mbedtls-2.9.0

mbedtls-3.*

mbedtls-3.0.0

mbedtls-3.1.0

polarssl-1.*

polarssl-1.2.0

polarssl-1.2.1

polarssl-1.2.2

polarssl-1.2.3

polarssl-1.2.4

polarssl-1.2.5

polarssl-1.2.6

polarssl-1.3.0

polarssl-1.3.0-rc0

polarssl-1.3.1

polarssl-1.3.2

polarssl-1.3.3

polarssl-1.3.4

polarssl-1.3.5

polarssl-1.3.6

polarssl-1.3.7

polarssl-1.3.8

polarssl-1.3.9

v2.*

v2.23.0

v2.24.0

v2.25.0

v2.26.0

v2.27.0

v2.28.0

v3.*

v3.0.0

v3.1.0

yotta-2.*

yotta-2.2.1

yotta-2.2.2

yotta-2.2.3

yotta-2.3.0

yotta-2.3.1