vulnerability

Ubuntu: USN-4267-1 (CVE-2018-0488): ARM mbed TLS vulnerabilities

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Feb 13, 2018
Added
Feb 6, 2020
Modified
Aug 18, 2025

Description

ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a crafted application packet within a TLS or DTLS session.

Solutions

ubuntu-upgrade-libmbedcrypto0ubuntu-upgrade-libmbedtls10ubuntu-upgrade-libmbedx509-0

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today