CVE-2021-45451 — Use of a Broken or Risky Cryptographic Algorithm in ARM Mbed TLS

CWE-327 — Use of a Broken or Risky Cryptographic Algorithm6 documents6 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 65.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
ARM Mbed TLSFedoraproject Fedora
Timeline
PublishedDec 21
Latest updateFeb 15

Description

In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDarm/mbed_tls< 3.1.0

Also affects: Fedora 36, 37

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-2grh-pj67-4p6p: In Mbed TLS before 3↗2021-12-22
▶
CVEList
CVE-2021-45451: In Mbed TLS before 3↗2021-12-21
▶
OSV
CVE-2021-45451: In Mbed TLS before 3↗2021-12-21
▶

📋Vendor Advisories

2
CISA ICS
Siemens SCALANCE XCM-/XRM-300↗2024-02-15
▶
Debian
CVE-2021-45451: mbedtls - In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle...↗2021
▶
CVE-2021-45451 — ARM Mbed TLS vulnerability | cvebase