| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | ≥ 2.17.0, < 2.24.0≥ 2.8.0, < 2.16.8< 2.7.17 | 2.24.02.16.82.7.17 |
An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free