{"id":"CVE-2017-2784","aliases":["ALPINE-CVE-2017-2784","DEBIAN-CVE-2017-2784","EUVD-2017-11927","GHSA-5wj7-rhf5-hqx4","MGASA-2017-0094","UBUNTU-CVE-2017-2784","openSUSE-SU-2017:0790-1","openSUSE-SU-2017:0792-1","openSUSE-SU-2024:11043-1","openSUSE-SU-2026:11119-1"],"status":"published","title":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code...","description":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.0339,"percentile":0.88883,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295"],"published":"2017-03-22T10:02:23Z","modified":"2026-10-24T10:31:02Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls","fixed_in":["2.4.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"mbedtls","fixed_in":["2.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mbedtls","fixed_in":["2.4.2-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mbedtls","fixed_in":["2.4.2-1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"mbedtls","fixed_in":["1.3.19-1.mga5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","fixed_in":["2.2.1-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 12","package":"mbedtls","fixed_in":["1.3.19-5.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-1"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.19-1.mga5"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-2ubuntu0.1"}]}],"versions":["2.1.2-1","2.2.0-1","2.2.1-1","2.2.1-2"]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.19-5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.19-5.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.2"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-1.1"}]}],"bundled":14}],"products":[{"vendor":"arm","product":"mbed tls"},{"vendor":"trustedfirmware","product":"mbed_tls"}],"references":[{"url":"https://security.gentoo.org/glsa/201706-18","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www.talosintelligence.com/reports/TALOS-2017-0274/","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2784"},{"url":"http://www.talosintelligence.com/reports/TALOS-2017-0274"},{"url":"https://github.com/advisories/GHSA-5wj7-rhf5-hqx4"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-2784","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-2784","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0094.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20561","tags":["report"]},{"url":"https://tls.mbed.org/tech-updates/releases/mbedtls-2.4.2-2.1.7-and-1.3.19-released","tags":["web"]},{"url":"https://lists.opensuse.org/opensuse-updates/2017-03/msg00072.html","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-2784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2784","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/WRIPVQ2ATMWAEIYYJETVM2L3IO7IWKFA/#WRIPVQ2ATMWAEIYYJETVM2L3IO7IWKFA","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1029017","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2784","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FAMN75AB4YE4LABPQEYS2NAM6F32VCFZ/#FAMN75AB4YE4LABPQEYS2NAM6F32VCFZ","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-35409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46393","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-2784","description":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.","status":"published","published":"2017-04-20T18:00:00Z","modified":"2024-08-05T14:02:07.676Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"updated_at":"2026-11-02T14:33:15.887816Z"}],"euvd":[{"id":"EUVD-2017-11927","description":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.","status":"published","published":"2017-04-20T18:00:00Z","modified":"2024-08-05T14:02:07Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:39:20.035866Z"}],"ghsa":[{"id":"GHSA-5wj7-rhf5-hqx4","title":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code...","description":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.","status":"published","published":"2022-05-13T01:01:28Z","modified":"2025-04-20T03:37:25Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T15:01:45.195531Z"}],"nvd":[{"id":"CVE-2017-2784","description":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.","status":"published","published":"2017-04-20T18:59:01.593Z","modified":"2026-06-17T01:16:50.36Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:03:46.08744Z"}],"osv":[{"id":"ALPINE-CVE-2017-2784","description":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.","status":"published","published":"2017-04-20T18:59:01.593Z","modified":"2026-06-15T18:18:06.771373222Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"CVE-2017-2784","description":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.","status":"published","published":"2017-04-20T18:59:01.593Z","modified":"2026-10-24T10:31:02.655418016Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"DEBIAN-CVE-2017-2784","description":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.","status":"published","published":"2017-04-20T18:59:01.593Z","modified":"2026-09-01T20:03:47.955897965Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:29.100767Z"},{"id":"UBUNTU-CVE-2017-2784","description":"An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.","status":"published","published":"2017-04-20T18:59:00Z","modified":"2026-04-22T11:23:12.517056Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.977781Z"},{"id":"MGASA-2017-0094","title":"Updated mbedtls packages fix security vulnerability","description":"In mbedTLS before 1.3.19, if a malicious peer supplies a certificate with\na specially crafted secp224k1 public key, then an attacker can cause the\nserver or client to attempt to free block of memory held on stack.\nDepending on the platform, this could result in a Denial of Service\n(client crash) or potentially could be exploited to allow remote code\nexecution with the same privileges as the host application\n(CVE-2017-2784).\n\nThe mbedtls package has been updated to version 1.3.19, fixing this issue\nas well as other security issues and bugs.\n","status":"published","published":"2017-03-27T21:27:33Z","modified":"2026-04-16T06:25:11.649208024Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2017:0790-1","title":"Security update for mbedtls","description":"This update to mbedtls 1.3.19 fixes security issues and bugs.\n\nThe following vulnerability was fixed:\n\nCVE-2017-2784: A remote user could have used a specially crafted certificate to cause\n               mbedtls to free a buffer allocated on the stack when verifying the validity\n               of public key with a secp224k1 curve, which could have allowed remote\n               code execution on some platforms (boo#1029017)\n\nThe following non-security changes are included:\n\n- Add checks to prevent signature forgeries for very large messages while using RSA through\n  the PK module in 64-bit systems.\n- Fixed potential livelock during the parsing of a CRL in PEM format\n","status":"published","published":"2017-03-22T10:02:23Z","modified":"2026-02-04T02:54:51.77356Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2017:0792-1","title":"Security update for mbedtls","description":"This update to mbedtls 1.3.19 fixes security issues and bugs.\n\nThe following vulnerability was fixed:\n\nCVE-2017-2784: A remote user could have used a specially crafted certificate to cause\n               mbedtls to free a buffer allocated on the stack when verifying the validity\n               of public key with a secp224k1 curve, which could have allowed remote\n               code execution on some platforms (boo#1029017)\n\nThe following non-security changes are included:\n\n- Add checks to prevent signature forgeries for very large messages while using RSA through\n  the PK module in 64-bit systems.\n- Fixed potential livelock during the parsing of a CRL in PEM format\n","status":"published","published":"2017-03-22T10:02:23Z","modified":"2026-02-04T04:14:51.163916Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11043-1","title":"libmbedcrypto7-2.27.0-1.2 on GA media","description":"These are all security issues fixed in the libmbedcrypto7-2.27.0-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:33:55.015453Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2026:11119-1","title":"libeverest-3.6.6-1.1 on GA media","description":"These are all security issues fixed in the libeverest-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-25T00:00:00Z","modified":"2026-06-26T08:15:07.625184367Z","updated_at":"2026-11-02T16:58:38.95195Z"}]}}