Vulnetix
Try Vulnetix Request Demo
ALPINE-CVE-2018-0497 PUBLISHED CVSS 5.900000095367432 MEDIUM

ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.

Risk Scores

CVSS v3.0
5.900000095367432
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Alpine:v3.16mbedtls2.1.2-r0, 2.11.0-r0, 2.2.0-r0
Alpine:v3.11mbedtls0, 0, 2.0.0-r0
Alpine:v3.17mbedtls2.1.2-r0, 2.7.0-r0, 2.6.1-r0
Alpine:v3.19mbedtls2.1.2-r0, 2.7.0-r0, 2.6.1-r0
Alpine:v3.23mbedtls0, 2.6.1-r0, 2.6.0-r0
Alpine:v3.10mbedtls0, 2.7.0-r0, 2.6.1-r0
Alpine:v3.20mbedtls2.0.0-r0, 0, 2.0.0-r0
Alpine:v3.13mbedtls2.7.0-r0, 2.1.2-r0, 2.7.0-r0
Alpine:v3.14mbedtls0, 2.7.0-r0, 2.6.1-r0
Alpine:v3.15mbedtls2.0.0-r0, 2.7.0-r0, 2.6.1-r0
Alpine:v3.22mbedtls2.6.1-r0, 2.6.0-r0, 2.5.1-r0
Alpine:v3.12mbedtls2.4.1-r0, 2.6.0-r0, 2.5.1-r0
Alpine:v3.18mbedtls2.0.0-r0, 0, 2.0.0-r0
Alpine:v3.21mbedtls2.6.1-r0, 2.6.0-r0, 2.5.1-r0

Timeline

References

Open in Interactive Console →