Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/mbedtls@2.8.0-1?distro=trixie
purl pkg:deb/debian/mbedtls@2.8.0-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-44ju-rrx6-rkcy ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input. CVE-2018-9989
VCID-dhdp-17ae-t7gf ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input. CVE-2018-9988

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:26:39.323643+00:00 Debian Importer Fixing VCID-44ju-rrx6-rkcy https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:28:05.360622+00:00 Debian Importer Fixing VCID-dhdp-17ae-t7gf https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:47:49.608485+00:00 Debian Importer Fixing VCID-44ju-rrx6-rkcy https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:18:51.035224+00:00 Debian Importer Fixing VCID-dhdp-17ae-t7gf https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:45:35.335737+00:00 Debian Importer Fixing VCID-44ju-rrx6-rkcy https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:45:35.295307+00:00 Debian Importer Fixing VCID-dhdp-17ae-t7gf https://security-tracker.debian.org/tracker/data/json 38.1.0