tocsin

Alpine/mbedtls: high 8.1

An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certi

Action: Upgrade mbedtls to 2.4.2-r0 or later.

Affected

introducedfixedlast affected
02.4.2-r0-

Fixed versions

2.4.2-r0

Sources

published · modified · JSON