Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ARM mbed TLS 资源管理错误漏洞
Vulnerability Description
ARM mbed TLS是英国ARM公司的一款为mbed产品提供安全通讯和加密功能的产品。 mbed TLS 存在资源管理错误漏洞，远程攻击者可利用该漏洞向应用程序发送一个特别设计的请求来触发一个双重自由错误，并在目标系统上执行任意代码。以下产品及版本受到影响：mbed TLS: 2.0.0, 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.1.9, 2.1.10, 2.1.11, 2.1.12, 2.1.13, 2.1.1
CVSS Information
N/A
Vulnerability Type
N/A