PT-2022-22810 · Mbed Tls+3 · Mbed Tls+3

Hubert Kario · Published 2022-07-13 · Updated 2025-08-21 · CVE-2022-35409

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Mbed TLS versions prior to 2.28.1 Mbed TLS versions 3.x prior to 3.2.0

Description An issue was discovered in Mbed TLS where an unauthenticated attacker can send an invalid ClientHello message to a DTLS server, causing a heap-based buffer over-read of up to 255 bytes. This can cause a server crash or possibly information disclosure based on error responses. Affected configurations have MBEDTLS SSL DTLS CLIENT PORT REUSE enabled and MBEDTLS SSL IN CONTENT LEN less than a threshold that depends on the configuration.

Recommendations For Mbed TLS versions prior to 2.28.1, update to version 2.28.1 or later. For Mbed TLS versions 3.x prior to 3.2.0, update to version 3.2.0 or later. As a temporary workaround, consider disabling the MBEDTLS SSL DTLS CLIENT PORT REUSE feature until a patch is available. Restrict access to the DTLS server to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2022-2237

ALT-PU-2022-2561

ALT-PU-2025-10462

CVE-2022-35409

DLA-3249-1

MGASA-2022-0415

OPENSUSE-SU-2022:10247-1

OPENSUSE-SU-2024:12478-1

Affected Products

Alt Linux

Astra Linux

Debian

Mbed Tls

References · 38

• 🔥 https://mbed-tls.readthedocs.io/en/latest/security-advisories/advisories/mbedtls-security-advisory-2022-07.html · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2022:10247-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-35409 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-35409 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35409 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-35409 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35409 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-35409 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-35409 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:12478-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2022-0415 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3249-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2022-0415.html · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-35409 · Vendor Advisory
• https://github.com/Mbed-TLS/mbedtls/releases · Note