Search for packages
Package details: pkg:deb/ubuntu/mbedtls@2.6.0-1
purl pkg:deb/ubuntu/mbedtls@2.6.0-1
Next non-vulnerable version 2.16.4-1ubuntu2
Latest non-vulnerable version 2.16.4-1ubuntu2
Risk 4.4
Vulnerabilities affecting this package (10)
Vulnerability Summary Fixed by
VCID-3bwz-revc-aaab
Aliases:
CVE-2017-18187
In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in library/ssl_srv.c.
2.8.0-1
Affected by 5 other vulnerabilities.
VCID-3s5y-zubs-aaab
Aliases:
CVE-2018-0498
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack.
2.12.0-1
Affected by 3 other vulnerabilities.
VCID-5kj3-xdpr-aaaf
Aliases:
CVE-2019-18222
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks.
2.16.4-1ubuntu2
Affected by 0 other vulnerabilities.
VCID-7mdz-n5xr-aaam
Aliases:
CVE-2019-16910
Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. (For Mbed TLS, the fix is also available in versions 2.7.12 and 2.16.3.)
2.16.4-1ubuntu2
Affected by 0 other vulnerabilities.
VCID-j24c-3huf-aaah
Aliases:
CVE-2018-0497
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.
2.12.0-1
Affected by 3 other vulnerabilities.
VCID-kk1q-u5b2-aaae
Aliases:
CVE-2018-0488
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a crafted application packet within a TLS or DTLS session.
2.7.0-2
Affected by 8 other vulnerabilities.
VCID-krrf-1uy1-aaam
Aliases:
CVE-2018-0487
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.
2.7.0-2
Affected by 8 other vulnerabilities.
VCID-pzw4-3yg7-aaae
Aliases:
CVE-2018-9989
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.
2.8.0-1
Affected by 5 other vulnerabilities.
VCID-sdw8-s8qf-aaac
Aliases:
CVE-2018-19608
Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.
2.16.4-1ubuntu2
Affected by 0 other vulnerabilities.
VCID-swp4-9rhk-aaaf
Aliases:
CVE-2018-9988
ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input.
2.8.0-1
Affected by 5 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version