UBUNTU-CVE-2022-35409
- Source
- https://ubuntu.com/security/CVE-2022-35409
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-35409.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2022-35409
- Upstream
- Published
- 2022-07-15T14:15:00Z
- Modified
- 2025-10-13T04:51:04Z
- Severity
-
- 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Ubuntu - medium
- Summary
- [none]
- Details
-
An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLSSSLDTLSCLIENTPORTREUSE enabled and MBEDTLSSSLINCONTENTLEN less than a threshold that depends on the configuration: 258 bytes if using mbedtlssslcookiecheck, and possibly up to 571 bytes with a custom cookie check function.
- References
-
- https://ubuntu.com/security/CVE-2022-35409
- https://github.com/Mbed-TLS/mbedtls-docs/blob/5e9790353d2d9e41e85262eebe52fd90bb49f1e0/security-advisories/advisories/mbedtls-security-advisory-2022-07.md
- https://github.com/Mbed-TLS/mbedtls/commit/f333dfab4a6c2d8a604a61558a8f783145161de4
- https://github.com/Mbed-TLS/mbedtls/commit/e5af9fabf7d68e3807b6ea78792794b8352dbba2
- https://github.com/Mbed-TLS/mbedtls/commit/862acb84033840b7e6376a4155ed5be2a6a4e117
- https://github.com/Mbed-TLS/mbedtls/commit/a39170bbed1f5a69f108ea19fe3510c3643d53ab
- https://github.com/Mbed-TLS/mbedtls/commit/33f41a8fa858128d5e9a1d1e1afbd4e63f24d444
- https://github.com/Mbed-TLS/mbedtls/commit/4353d3d593cda3849a04c676288e0c790fa86a3c
- https://github.com/Mbed-TLS/mbedtls/commit/3c036f54cc3a25e4d6b8003202b7e640522f4621
- https://github.com/Mbed-TLS/mbedtls/commit/6b4f062cde84b9df57275676c428508ec6e41211
- https://github.com/Mbed-TLS/mbedtls/commit/719c723afc63930d3472a12c0edb654a7d08d6b9
- https://www.cve.org/CVERecord?id=CVE-2022-35409
Affected packages
Ubuntu:22.04:LTS / mbedtls
Package
- Name
- mbedtls
- Purl
- pkg:deb/ubuntu/mbedtls@2.28.0-1build1?arch=source&distro=jammy
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"binaries": [
{
"binary_name": "libmbedcrypto7",
"binary_version": "2.28.0-1build1"
},
{
"binary_name": "libmbedtls-dev",
"binary_version": "2.28.0-1build1"
},
{
"binary_name": "libmbedtls14",
"binary_version": "2.28.0-1build1"
},
{
"binary_name": "libmbedx509-1",
"binary_version": "2.28.0-1build1"
}
]
}