Mbed TLS/PolarSSL Historical Security Advisories Summary

From this webpage screenshot, we can extract the following key information about vulnerabilities: 1. Vulnerability List: - Limited authentication bypass in TLS 1.3 optional client authentication - Stack buffer overflow in ECDSA signature conversion functions - CTR_DRBG prioritized over HMAC_DRBG as the PSA DRBG - Insecure handling of shared memory in PSA Crypto APIs - Buffer overflow in mbedtls_x509_set_extension() - Timing side channel in private key RSA operations - Buffer overflow in TLS handshake parsing with ECDH - Buffer overread in TLS stream cipher suites - Buffer overread in DTLS ClientHello parsing - Double Free in mbedtls_ssl_set_session() in an error case - Local side channel attack on static Diffie-Hellman with Montgomery curves - Local side channel attack on RSA - Protocol weakness in DHE-PSK key exchange - Local side channel attack on RSA and static Diffie-Hellman - Local side channel attack on classical CBC decryption in (D)TLS - Side-channel attack on ECC key import and validation - Side channel attack on ECDSA - Cache attack against RSA key import in SGX - Side channel attack on ECDSA - Side channel attack on deterministic ECDSA - Mbed TLS Security Advisory 2018-03 - Mbed TLS Security Advisory 2018-02 - mbed TLS Security Advisory 2018-01 - mbed TLS Security Advisory 2017-02 - mbed TLS Security Advisory 2017-01 - mbed TLS Security Advisory 2015-01 - PolarSSL Security Advisory 2014-04 - PolarSSL Security Advisory 2014-03 - PolarSSL Security Advisory 2014-02 - PolarSSL Security Advisory 2014-01 - PolarSSL Security Advisory 2013-05 - PolarSSL Security Advisory 2013-04 - PolarSSL Security Advisory 2013-03 - PolarSSL Security Advisory 2013-02 - PolarSSL Security Advisory 2013-01 - PolarSSL Security Advisory 2012-01 - PolarSSL Security Advisory 2011-02 - PolarSSL Security Advisory 2011-01 2. Security Recommendations: - Limited authentication bypass in TLS 1.3 optional client authentication - Stack buffer overflow in ECDSA signature conversion functions - CTR_DRBG prioritized over HMAC_DRBG as the PSA DRBG - Insecure handling of shared memory in PSA Crypto APIs - Buffer overflow in mbedtls_x509_set_extension() - Timing side channel in private key RSA operations - Buffer overflow in TLS handshake parsing with ECDH - Buffer overread in TLS stream cipher suites - Buffer overread in DTLS ClientHello parsing - Double Free in mbedtls_ssl_set_session() in an error case - Local side channel attack on static Diffie-Hellman with Montgomery curves - Local side channel attack on RSA - Protocol weakness in DHE-PSK key exchange - Local side channel attack on RSA and static Diffie-Hellman - Local side channel attack on classical CBC decryption in (D)TLS - Side-channel attack on ECC key import and validation - Side channel attack on ECDSA - Cache attack against RSA key import in SGX - Side channel attack on ECDSA - Side channel attack on deterministic ECDSA This information can help developers and security experts understand the security vulnerabilities present in the Mbed TLS library and take appropriate measures to remediate them.

Goal Reached Thanks to every supporter — we hit 100%!

Mbed TLS/PolarSSL Historical Security Advisories Summary