Trusted Firmware Mbed TLS 安全漏洞

漏洞信息详情

Trusted Firmware Mbed TLS 2.23.0版本及之前版本library / ssl_msg.c中mbedtls_ssl_decrypt_buf存在安全漏洞，该漏洞允许攻击者恢复秘密信息。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-1

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/5OSOFUD6UTGTDDSQRS62BPXDU52I6PUA/

来源:MISC

链接:https://tls.mbed.org/tech-updates/security-advisories

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/IRPBHCQKZXHVKOP5O5EWE7P76AWGUXQJ/

来源:CONFIRM

链接:https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2020-09-1

来源:FEDORA

链接:https://lists.fedoraproject.org/archives/list/[email protected]/message/OD3NM6GD73CTFFRBKG5G2ACXGG7QQHCC/

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2020-16150

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Trusted-Firmware-Mbed-TLS-information-disclosure-via-mbedtls-ssl-decrypt-buf-33341

暂无