{"id":"CVE-2018-0487","aliases":["ALPINE-CVE-2018-0487","DEBIAN-CVE-2018-0487","DSA-4138-1","DSA-4147-1","EUVD-2018-1310","GHSA-83xw-9x6g-hh74","MGASA-2018-0163","UBUNTU-CVE-2018-0487","USN-4267-1","openSUSE-SU-2018:0488-1","openSUSE-SU-2018:0491-1","openSUSE-SU-2024:11043-1","openSUSE-SU-2026:11119-1"],"status":"published","title":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute...","description":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03255,"percentile":0.88425,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2018-02-13T15:00:00Z","modified":"2026-10-24T10:30:20Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"mbedtls","fixed_in":["2.7.0-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"mbedtls","fixed_in":["2.7.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"mbedtls","fixed_in":["2.7.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"mbedtls","fixed_in":["2.7.0-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","fixed_in":["2.2.1-2ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.2-1+deb9u2"}]}],"versions":["2.4.2-1","2.4.2-1+deb9u1","2.4.2-1+deb9u1~bpo8+1"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"polarssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-2.1+deb8u3"}]}],"versions":["1.3.9-2.1","1.3.9-2.1+deb8u1","1.3.9-2.1+deb8u2"],"bundled":3},{"source":"osv","ecosystem":"Mageia:6","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.0-1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"shadowsocks-libev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-1.1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"bctoolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.0-4.1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"hiawatha","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.4-1.1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Mageia:6","package":"dolphin-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0-5.1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-2ubuntu0.3"}]}],"versions":["2.1.2-1","2.2.0-1","2.2.1-1","2.2.1-2","2.2.1-2ubuntu0.1","2.2.1-2ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-2ubuntu0.3"}]}],"versions":["2.1.2-1","2.2.0-1","2.2.1-1","2.2.1-2","2.2.1-2ubuntu0.1","2.2.1-2ubuntu0.2"],"bundled":5},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.19-11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 12","package":"mbedtls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.19-11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27.0-1.2"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mbedtls-3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-1.1"}]}],"bundled":14}],"products":[{"vendor":"arm","product":"mbed_tls"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4147","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4138","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory","advisory","report"]},{"url":"http://www.securityfocus.com/bid/103056","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201804-19","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://usn.ubuntu.com/4267-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0487"},{"url":"https://github.com/advisories/GHSA-83xw-9x6g-hh74"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-0487","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-0487","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0163.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22653","tags":["report"]},{"url":"https://tls.mbed.org/tech-updates/releases/mbedtls-2.7.0-2.1.10-and-1.3.22-released","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-0487","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4267-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-0487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-18187","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-0488","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-0497","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-0498","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1080826","tags":["report"]},{"url":"https://bugzilla.suse.com/1080828","tags":["report"]},{"url":"https://bugzilla.suse.com/1080973","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0488","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14032","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2784","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5291","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7575","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-24119","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-45450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-35409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-46393","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-0487","description":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.","status":"published","published":"2018-02-13T15:00:00Z","modified":"2024-08-05T03:28:11.092Z","updated_at":"2026-11-02T14:35:12.160284Z"}],"euvd":[{"id":"EUVD-2018-1310","description":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.","status":"published","published":"2018-02-13T15:00:00Z","modified":"2024-08-05T03:28:11Z","updated_at":"2026-11-03T02:40:18.31448Z"}],"ghsa":[{"id":"GHSA-83xw-9x6g-hh74","title":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute...","description":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.","status":"published","published":"2022-05-13T01:28:29Z","modified":"2023-02-01T05:07:40Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:50:35.110336Z"}],"nvd":[{"id":"CVE-2018-0487","description":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.","status":"published","published":"2018-02-13T15:29:00.217Z","modified":"2026-06-17T01:30:56.457Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:04:22.897995Z"}],"osv":[{"id":"ALPINE-CVE-2018-0487","description":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.","status":"published","published":"2018-02-13T15:29:00.217Z","modified":"2026-10-23T17:17:55.142687756Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-0487","description":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.","status":"published","published":"2018-02-13T15:29:00.217Z","modified":"2026-10-24T10:30:20.361505778Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"DEBIAN-CVE-2018-0487","description":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.","status":"published","published":"2018-02-13T15:29:00.217Z","modified":"2026-10-23T18:02:55.268928994Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-0487","description":"ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.","status":"published","published":"2018-02-13T15:29:00Z","modified":"2026-04-22T11:38:45.367663Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:16.154988Z"},{"id":"DSA-4138-1","title":"mbedtls - security update","status":"published","published":"2018-03-15T00:00:00Z","modified":"2026-03-09T01:20:37.886765Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"DSA-4147-1","title":"polarssl - security update","status":"published","published":"2018-03-21T00:00:00Z","modified":"2026-03-09T01:18:45.641739Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2018-0163","title":"Updated mbedtls and related packages fix security vulnerabilities","description":"The mbedtls package has been updated to fix several security issues.\n\nFixed a heap corruption issue in the implementation of the truncated HMAC\nextension. When the truncated HMAC extension is enabled and CBC is used,\nsending a malicious application packet could be used to selectively corrupt\n6 bytes on the peer's heap, which could potentially lead to crash or remote\ncode execution. The issue could be triggered remotely from either side in\nboth TLS and DTLS. (CVE-2018-0488) \n\nFixed a buffer overflow in RSA-PSS verification when the hash was too large\nfor the key size, which could potentially lead to crash or remote code\nexecution. (CVE-2018-0487)\n","status":"published","published":"2018-03-10T20:47:30Z","modified":"2026-04-16T06:26:10.410349811Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2018:0488-1","title":"Security update for mbedtls","description":"This update for mbedtls fixes the following issues:\n\n- CVE-2018-0487: Fixed a buffer overflow in RSASSA-PSS signature\n  verification, which allowed remote attackers to execute arbitrary code or\n  cause a denial of service via a crafted certificate chain. (boo#1080826)\n- CVE-2018-0488: Fixed a heap vulnerability, which allowed remote\n  attackers to execute arbitrary code or cause a DoS via a crafted application\n  packet when the truncated HMAC extension and CBC are used. (boo#1080828)\n- CVE-2017-18187: Fixed bound check in ssl_parse_client_psk_identity(), which\n  might lead to an overflow. (boo#1080973)\n","status":"published","published":"2018-02-20T12:28:29Z","modified":"2026-02-04T04:23:37.525507Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2018:0491-1","title":"Security update for mbedtls","description":"This update for mbedtls fixes the following issues:\n\n- CVE-2018-0487: Fixed a buffer overflow in RSASSA-PSS signature\n  verification, which allowed remote attackers to execute arbitrary code or\n  cause a denial of service via a crafted certificate chain. (boo#1080826)\n- CVE-2018-0488: Fixed a heap vulnerability, which allowed remote\n  attackers to execute arbitrary code or cause a DoS via a crafted application\n  packet when the truncated HMAC extension and CBC are used. (boo#1080828)\n- CVE-2017-18187: Fixed bound check in ssl_parse_client_psk_identity(), which\n  might lead to an overflow. (boo#1080973)\n","status":"published","published":"2018-02-20T12:28:29Z","modified":"2025-05-07T18:09:40.06094Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"openSUSE-SU-2024:11043-1","title":"libmbedcrypto7-2.27.0-1.2 on GA media","description":"These are all security issues fixed in the libmbedcrypto7-2.27.0-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:33:55.015453Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2026:11119-1","title":"libeverest-3.6.6-1.1 on GA media","description":"These are all security issues fixed in the libeverest-3.6.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-25T00:00:00Z","modified":"2026-06-26T08:15:07.625184367Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"USN-4267-1","title":"mbedtls vulnerabilities","description":"It was discovered that mbedtls has a bounds-check bypass through an integer\noverflow that can be used by an attacked to execute arbitrary code or cause a\ndenial of service.\n(CVE-2017-18187)\n\nIt was discovered that mbedtls has a vulnerability where an attacker could\nexecute arbitrary code or cause a denial of service (buffer overflow)\nvia a crafted certificate chain that is mishandled during RSASSA-PSS\nsignature verification within a TLS or DTLS session.\n(CVE-2018-0487)\n\nIt was discovered that mbedtls has a vulnerability where an attacker could\nexecute arbitrary code or cause a denial of service (heap corruption) via a\ncrafted application packet within a TLS or DTLS session.\n(CVE-2018-0488)\n\nIt was discovered that mbedtls has a vulnerability that allows remote\nattackers to achieve partial plaintext recovery (for a CBC based ciphersuite)\nvia a timing-based side-channel attack.\n(CVE-2018-0497)\n\nIt was discovered that mbedtls has a vulnerability that allows local users to\nachieve partial plaintext recovery (for a CBC based ciphersuite) via a\ncache-based side-channel attack.\n(CVE-2018-0498)\n","status":"published","published":"2020-02-05T12:12:16Z","modified":"2026-04-27T15:48:42.654286426Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}