vulnerability
Alpine Linux: CVE-2018-0498: Vulnerability in Multiple Components
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 2 | (AV:L/AC:M/Au:N/C:P/I:N/A:N) | Jul 28, 2018 | Aug 15, 2018 | Mar 25, 2026 |
Severity
2
CVSS
(AV:L/AC:M/Au:N/C:P/I:N/A:N)
Published
Jul 28, 2018
Added
Aug 15, 2018
Modified
Mar 25, 2026
Description
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack.
Solutions
alpine-linux-upgrade-mbedtlsalpine-linux-upgrade-mbedtls2
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.