GCVE-VVD-MAGEIA-2018-253

Advisory Published

Vulnetix · Advisory published May 24, 2018

CVE-2018-9988: ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input. CVE-2018-9989: ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	mbedtls	0 (affected), 2.7.3-1.mga6 (unaffected)	—
Mageia	dolphin-emu	0 (affected), 5.0-5.2.mga6.tainted (unaffected)	—
Mageia	hiawatha	0 (affected), 10.4-1.2.mga6 (unaffected)	—
Mageia	shadowsocks-libev	0 (affected), 3.1.0-1.2.mga6 (unaffected)	—
Mageia	bctoolbox	0 (affected), 0.2.0-4.2.mga6 (unaffected)	—

Aliases

CVE-2018-9988 CVE-2018-9989

Transitive aliases

GHSA-w8m4-8r7x-cjvp OPENSUSE-SU-2018:1039-1 GHSA-h9j8-4v77-hmr3 CNVD-2018-09577 OPENSUSE-SU-2018:1041-1 GSD-2018-9988 GSD-2018-9989

References

Updated mbedtls packages fix security issues

advisory

Updated mbedtls packages fix security issues

issue

Updated mbedtls packages fix security issues

issue

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON