Non notée
CVE-2018-0497 ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext…
Description
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 | Versions non publiées |