CVE-2021-44732

概要

参考情報

• bugs.gentoo.org/829660 · Issue Tracking
• ARMmbed/mbedtls release · Release Notes
• ARMmbed/mbedtls release v2.16.12 · Release Notes
• ARMmbed/mbedtls release v2.28.0 · Release Notes
• ARMmbed/mbedtls release v3.1.0 · Release Notes
• lists.debian.org/debian-lts-announce/2022/12/msg00036.html · Mailing List
• tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2021-12 · Exploit
• lists.debian.org/debian-lts-announce/2025/06/msg00034.html

mbed tls のその他の脆弱性

• CVE-2026-34877緊急 9.8An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0. Insufficient protection of serialized SSL context or s…
• CVE-2026-34872緊急 9.1An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH du…
• CVE-2025-66442中 5.1In Mbed TLS through 4.0.0, there is a compiler-induced timing side channel (in RSA and CBC/ECB decryption) that only occurs with LLVM's sele…
• CVE-2026-34871中 6.7An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a Pseud…
• CVE-2026-25835高 7.7Mbed TLS before 3.6.6 and TF-PSA-Crypto before 1.1.0 misuse seeds in a Pseudo-Random Number Generator (PRNG).