ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a crafted application packet within a TLS or DTLS session.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: debian

Published: 2018-02-13T15:00:00

Updated: 2024-08-05T03:28:11.050Z

Reserved: 2017-11-27T00:00:00

Link: CVE-2018-0488

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-02-13T15:29:00.263

Modified: 2020-08-24T17:37:01.140

Link: CVE-2018-0488

cve-icon Redhat

No data.