| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | ≥ 2.7.0, < 2.7.2< 2.1.11 | 2.7.22.1.11 |
| mbed tls | = 2.8.0 |
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free