CVE-2021-43666

Description

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password's length is 0.

References

https://lists.debian.org/debian-lts-announce/2025/06/msg00034.html

https://lists.debian.org/debian-lts-announce/2022/12/msg00036.html

https://github.com/ARMmbed/mbedtls/issues/5136

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS