| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | ≥ 2.17.0, < 2.24.0≥ 2.8.0, < 2.16.8< 2.7.17 | 2.24.02.16.82.7.17 |
An issue was discovered in Mbed TLS before 2.24.0 (and before 2.16.8 LTS and before 2.7.17 LTS). There is missing zeroization of plaintext buffers in mbedtls_ssl_read to erase unused application data from memory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free