| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | ≥ 2.1.0, < 2.1.17≥ 2.7.0, < 2.7.8 | 2.1.172.7.8 |
| mbed tls | ≥ 2.14.0, < 2.14.1 | 2.14.1 |
Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free