Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2025-208 Medium 5.3

An issue was discovered in Arm Mbed TLS before 2.24.0

JLSEC Published
Modified
Severity
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected Packages
MbedTLS_jll < 2.16.8+0

An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.

References