Skip to content
Not rated

CVE-2018-0498 ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery…

Description

ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack.

Affected products and versions

Product Affected versions Fixed in
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 Versions not published
The 2 CVEs of ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 →
Track this CVE