CVE-2022-35409

    Dashboard / Vulnerabilities / CVE-2022-35409

    CVE-2022-35409

    Published: 15 Jul 2022Last Modified: 27 Aug 2026

    Summary:

    Details: An issue was discovered in Mbed TLS before 2.28.1 and 3.x before 3.2.0. In some configurations, an unauthenticated attacker can send an invalid ClientHello message to a DTLS server that causes a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE enabled and MBEDTLS_SSL_IN_CONTENT_LEN less than a threshold that depends on the configuration: 258 bytes if using mbedtls_ssl_cookie_check, and possibly up to 571 bytes with a custom cookie check function.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35409.json, https://mbed-tls.readthedocs.io/en/latest/security-advisories/advisories/mbedtls-security-advisory-2022-07.html, https://nvd.nist.gov/vuln/detail/CVE-2022-35409, https://github.com/Mbed-TLS/mbedtls/releases, https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8df2f8e7b9c7bb9390ac74bb7bace27edca81a2b
    Fixed -3aef7670b78ddebf80f4ad38b9a0059d40021832

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-35409 | CVE-DB