| Package | Affected versions | Patched versions |
|---|---|---|
| mbed tls | ≥ 2.17.0, < 2.28.0< 2.16.12 | 2.28.02.16.12 |
| mbed tls | = 3.0.0 |
Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free