A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.
2022-03-24T18:15:08.333
2024-11-21T06:29:34.620
Modified
CVSSv3.1: 7.5 (HIGH)
AV:N/AC:L/Au:N/C:N/I:N/A:P
10.0
2.9
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | arm | mbed_tls | ≤ 3.0.0 | Yes |
Operating System | debian | debian_linux | 10.0 | Yes |