← Database

CVE-2021-43666

HIGH CVSS: 7.5 Published: 2022-03-24 Modified: 2026-06-17

Description

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.

Affected Platforms

Debian Debian LinuxArm Mbed Tls

Weakness Type

NVD-CWE-noinfo, CWE-130

References