Not rated
CVE-2018-0498 ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery…
Description
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 | Versions not published |