Known vulnerabilities in mbed TLS - page 3
Vendor:
ARM
Software:
mbed TLS
Software CPE:
cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*
Website:
https://www.arm.com/
Total vulnerabilities:
55
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.2.0
4.1.1
3.6.7
4.1.0
3.6.6
4.0.0
3.6.5
3.6.4
3.6.3
2.28.10
3.6.2
3.6.1
2.28.9
3.6.0
2.28.8
3.5.2
2.28.7
3.5.1
2.28.6
3.5.0
2.28.5
3.4.1
2.28.4
3.4.0
2.28.3
2.28.2
3.3.0
1.2.6
1.2.5
1.2.4
1.2.3
1.2.2
1.2.1
1.2.0
1.1.6
1.1.5
1.1.4
1.1.3
1.1.2
1.1.1
1.1.0
3.2.1
3.2.0
2.28.1
2.16.12
3.1.0
2.28.0
2.16.11
2.27.0
3.0.0
2.7.19
2.16.10
2.26.0
2.7.18
2.16.9
2.25.0
2.7.17
2.16.8
2.24.0
2.7.16
2.16.7
2.23.0
2.7.15
2.16.6
2.22.0
2.21.0
2.20.0
2.19.1
2.19.0
2.18.1
2.18.0
2.17.0
2.16.5
2.16.4
2.16.3
2.16.2
2.16.1
2.16.0
2.15.1
2.15.0
2.14.1
2.14.0
2.13.1
2.13.0
2.11.0
2.10.0
2.9.0
2.7.14
2.7.13
2.7.12
2.7.11
2.7.10
2.7.9
2.7.8
2.7.7
2.7.6
2.7.4
2.7.3
2.7.1
2.6.1
2.6.0
2.5.1
2.5.0
2.4.1
2.3.0
2.2.1
2.2.0
2.1.18
2.1.17
2.1.16
2.1.15
2.1.13
2.1.12
2.0.0
2.1.14
2.7.5
2.12.0
2.8.0
2.7.2
2.1.11
2.7.0
2.1.10
1.3.22
2.4.2
2.4.0
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
1.3.21
1.3.20
1.3.19
1.3.18
1.3.17
1.3.16
1.3.15
1.3.14
1.3.13
1.3.12
1.3.11
1.3.10
1.3.9
1.3.8
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
Vulnerabilities (55)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU71100 - Cleartext Transmission of Sensitive Information CVE-2020-36423 |
CWE-319 | Medium | 2.7.16, 2.16.7, 2.23.0 | 11.01.2023 |
SB2020070202 |
||
| #VU71099 - Cryptographic Issues CVE-2020-36421 |
CWE-310 | Low | 2.7.16, 2.16.7, 2.23.0 | 11.01.2023 |
SB2020070202 |
||
| #VU46187 - Cryptographic Issues CVE-2020-16150 |
CWE-310 | Low | 2.7.17, 2.16.8, 2.24.0 | 01.09.2020 |
SB2020090123 SB2020092807 SB2021010806 and 6 more |
||
| #VU29653 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-10932 |
CWE-327 | Low | 2.7.15, 2.16.6, 2.22.0 | 12.07.2020 |
SB2020041627 SB2020072922 SB2020052524 and 5 more |
||
| #VU29447 - Cryptographic Issues CVE-2020-36422 |
CWE-310 | Low | 2.7.16, 2.16.7, 2.23.0 | 02.07.2020 |
SB2020070202 |
||
| #VU26020 - Cryptographic Issues CVE-2019-18222 |
CWE-310 | Low | 2.7.13, 2.16.4, 2.20.0 | 11.03.2020 |
SB2020012313 SB2020031140 SB2020040424 and 5 more |
||
| #VU14538 - Improper Certificate Validation CVE-2018-1000520 |
CWE-295 | Low | - | 27.08.2018 | - | ||
| #VU14174 - Exposure of sensitive information to an unauthorized actor CVE-2018-0497 |
CWE-200 | Low | 2.1.14, 2.7.5, 2.12.0 | 02.08.2018 |
SB2018080208 SB2018091801 SB2020020801 and 4 more |
||
| #VU14173 - Exposure of sensitive information to an unauthorized actor CVE-2018-0498 |
CWE-200 | Low | 2.1.14, 2.7.5, 2.12.0 | 02.08.2018 |
SB2018080208 SB2018091801 SB2020020801 and 1 more |
||
| #VU12597 - Buffer over-read CVE-2018-9989 |
CWE-126 | Low | - | 11.05.2018 | - | ||
| #VU12596 - Buffer over-read CVE-2018-9988 |
CWE-126 | Low | - | 07.05.2018 | - | ||
| #VU10955 - Buffer overflow CVE-2018-0487 |
CWE-120 | High | - | 13.03.2018 | - | ||
| #VU10943 - Improper input validation CVE-2018-0488 |
CWE-20 | High | - | 13.03.2018 | - | ||
| #VU31776 - Improper Control of Generation of Code ('Code Injection') CVE-2015-8036 |
CWE-94 | Medium | 2.1.2 | 02.11.2015 |
SB2015110203 |
||
| #VU33317 - Cryptographic Issues CVE-2013-0169 |
CWE-310 | Low | 1.1.6, 1.2.6 | 08.02.2013 |
SB2013020805 SB2013020606 SB2014040702 and 4 more |
Showing elements 41 - 60 out of 55