Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
Related vulnerabilities
GSD-2021-35409
Vulnerability from gsd - Updated: 2023-12-13 01:23Details
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2021-35409",
"id": "GSD-2021-35409",
"references": [
"https://www.suse.com/security/cve/CVE-2021-35409.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2021-35409"
],
"id": "GSD-2021-35409",
"modified": "2023-12-13T01:23:28.130780Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2021-35409",
"STATE": "RESERVED"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
}
]
}
}
}
}
OPENSUSE-SU-2022:10247-1
Vulnerability from csaf_opensuse - Published: 2022-12-22 12:33 - Updated: 2022-12-22 12:33Summary
Security update for mbedtls
Severity
Important
Notes
Title of the patch: Security update for mbedtls
Description of the patch: This update for mbedtls fixes the following issues:
- CVE-2022-35409: Fixed buffer overread in DTLS ClientHello parsing (boo#1201581).
Patchnames: openSUSE-2022-10247
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
9.1 (Critical)
Vendor Fix
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
References
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for mbedtls",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for mbedtls fixes the following issues:\n\n- CVE-2022-35409: Fixed buffer overread in DTLS ClientHello parsing (boo#1201581).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2022-10247",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_10247-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2022:10247-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3NAO4EU3XHQJB2IY7LNSERGELWFEJAUJ/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2022:10247-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3NAO4EU3XHQJB2IY7LNSERGELWFEJAUJ/"
},
{
"category": "self",
"summary": "SUSE Bug 1201581",
"url": "https://bugzilla.suse.com/1201581"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-35409 page",
"url": "https://www.suse.com/security/cve/CVE-2021-35409/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-35409 page",
"url": "https://www.suse.com/security/cve/CVE-2022-35409/"
}
],
"title": "Security update for mbedtls",
"tracking": {
"current_release_date": "2022-12-22T12:33:10Z",
"generator": {
"date": "2022-12-22T12:33:10Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2022:10247-1",
"initial_release_date": "2022-12-22T12:33:10Z",
"revision_history": [
{
"date": "2022-12-22T12:33:10Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"product": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"product_id": "libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"product": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"product_id": "libmbedtls12-2.16.9-bp153.2.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"product": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"product_id": "libmbedx509-0-2.16.9-bp153.2.8.1.aarch64"
}
},
{
"category": "product_version",
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"product": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"product_id": "mbedtls-devel-2.16.9-bp153.2.8.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"product": {
"name": "libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"product_id": "libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"product": {
"name": "libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"product_id": "libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32"
}
},
{
"category": "product_version",
"name": "libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"product": {
"name": "libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"product_id": "libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"product": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"product_id": "libmbedcrypto3-2.16.9-bp153.2.8.1.i586"
}
},
{
"category": "product_version",
"name": "libmbedtls12-2.16.9-bp153.2.8.1.i586",
"product": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.i586",
"product_id": "libmbedtls12-2.16.9-bp153.2.8.1.i586"
}
},
{
"category": "product_version",
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"product": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"product_id": "libmbedx509-0-2.16.9-bp153.2.8.1.i586"
}
},
{
"category": "product_version",
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"product": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"product_id": "mbedtls-devel-2.16.9-bp153.2.8.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"product": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"product_id": "libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"product": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"product_id": "libmbedtls12-2.16.9-bp153.2.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"product": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"product_id": "libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le"
}
},
{
"category": "product_version",
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"product": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"product_id": "mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"product": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"product_id": "libmbedcrypto3-2.16.9-bp153.2.8.1.s390x"
}
},
{
"category": "product_version",
"name": "libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"product": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"product_id": "libmbedtls12-2.16.9-bp153.2.8.1.s390x"
}
},
{
"category": "product_version",
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"product": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"product_id": "libmbedx509-0-2.16.9-bp153.2.8.1.s390x"
}
},
{
"category": "product_version",
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"product": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"product_id": "mbedtls-devel-2.16.9-bp153.2.8.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"product": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"product_id": "libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"product": {
"name": "libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"product_id": "libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"product": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"product_id": "libmbedtls12-2.16.9-bp153.2.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"product": {
"name": "libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"product_id": "libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"product": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"product_id": "libmbedx509-0-2.16.9-bp153.2.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"product": {
"name": "libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"product_id": "libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64"
}
},
{
"category": "product_version",
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.x86_64",
"product": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.x86_64",
"product_id": "mbedtls-devel-2.16.9-bp153.2.8.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 15 SP3",
"product": {
"name": "SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3"
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.i586 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.s390x as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32"
},
"product_reference": "libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.aarch64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.i586 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.i586"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.i586",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.ppc64le as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.s390x as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.s390x"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.x86_64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32"
},
"product_reference": "libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.aarch64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.i586 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.i586"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.s390x as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.x86_64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32"
},
"product_reference": "libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.aarch64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.i586 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.i586"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.s390x as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.x86_64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.i586 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32"
},
"product_reference": "libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.i586 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.i586"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.s390x"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-2.16.9-bp153.2.8.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32"
},
"product_reference": "libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.i586 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.i586"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-2.16.9-bp153.2.8.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32"
},
"product_reference": "libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.i586 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.i586"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.s390x as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "mbedtls-devel-2.16.9-bp153.2.8.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64"
},
"product_reference": "mbedtls-devel-2.16.9-bp153.2.8.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-35409",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-35409"
}
],
"notes": [
{
"category": "general",
"text": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-35409",
"url": "https://www.suse.com/security/cve/CVE-2021-35409"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-12-22T12:33:10Z",
"details": "important"
}
],
"title": "CVE-2021-35409"
},
{
"cve": "CVE-2022-35409",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-35409"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-35409",
"url": "https://www.suse.com/security/cve/CVE-2022-35409"
},
{
"category": "external",
"summary": "SUSE Bug 1201581 for CVE-2022-35409",
"url": "https://bugzilla.suse.com/1201581"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"SUSE Package Hub 15 SP3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"SUSE Package Hub 15 SP3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedcrypto3-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedcrypto3-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedtls12-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedtls12-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:libmbedx509-0-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-32bit-2.16.9-bp153.2.8.1.x86_64",
"openSUSE Leap 15.3:libmbedx509-0-64bit-2.16.9-bp153.2.8.1.aarch64_ilp32",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.aarch64",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.i586",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.ppc64le",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.s390x",
"openSUSE Leap 15.3:mbedtls-devel-2.16.9-bp153.2.8.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2022-12-22T12:33:10Z",
"details": "critical"
}
],
"title": "CVE-2022-35409"
}
]
}