Skip to content
Sign in
Not rated

CVE-2018-0497 ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext…

Description

ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.

Affected products and versions

Product Affected versions Fixed in
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 Versions not published

Other CVEs of ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14

The 2 CVEs of ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 →
CVE-2018-0498 ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery… Not rated
Track this CVE