Description
In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.
Advisories 2
- ICSA-24-046-11 Siemens SCALANCE XCM-/XRM-300 CISA ICS & IT advisories · Feb 13, 2024
- SSA-806742 SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4 Siemens ProductCERT · Feb 13, 2024
References
- https://github.com/ARMmbed/mbedtls/releases/tag/v3.1.0
- FEDORA-2022-ff582c5b0d vendor-advisory
- FEDORA-2022-1dd9dc5140 vendor-advisory