CVE-2017-14032

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-14032
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-14032.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-14032
Related
Published
2017-08-30T20:29:00Z
Modified
2024-12-05T15:07:40.101101Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.

References

Affected packages

Alpine:v3.10 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.11 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.12 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.13 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.14 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.15 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.16 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.17 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.18 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.19 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.20 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Alpine:v3.21 / mbedtls

Package

Name
mbedtls
Purl
pkg:apk/alpine/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-r0

Affected versions

2.*

2.0.0-r0
2.1.2-r0
2.2.0-r0
2.2.0-r1
2.2.1-r0
2.3.0-r0
2.4.0-r0
2.4.1-r0
2.4.2-r0
2.5.1-r0

Debian:11 / mbedtls

Package

Name
mbedtls
Purl
pkg:deb/debian/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / mbedtls

Package

Name
mbedtls
Purl
pkg:deb/debian/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / mbedtls

Package

Name
mbedtls
Purl
pkg:deb/debian/mbedtls?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.6.0-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/armmbed/mbedtls

Affected ranges

Type
GIT
Repo
https://github.com/armmbed/mbedtls
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
015e48df6e2f15275161012fbb2544ce0a84c752
Last affected
016a0d3b6f23130a7f26c32afb5df08efcf19967
Last affected
0a0c22e0efcf2f8f71d7e16712f80b8f77326f72
Last affected
19eef51487931784ba937b24ad1e7526d94fb7f3
Last affected
1a6a15c795922f05bd2ea17addf27eddcd256a15
Last affected
1f4e08c979bee3f7d790f23c863b547487fbd2f7
Last affected
1fe5e8ab44ef46b582ab54db5afcb6bab180d440
Last affected
23234776994c64c08f47b6db55a593e01b71c5ef
Last affected
2d01f2d4c50cac7ba257ef2af791d97e9697c01c
Last affected
3edec6c4edf398315b6b59e9ce26e12774095775
Last affected
4cb87f409df0ddd878ea50cfca7dc8735ee574f2
Last affected
543e4366bc102d59623717b9053547d10605e725
Last affected
59ae96f167a19f4d04dc6db61f6587b37ccd429f
Last affected
8254ed2a9fadede8c6bf414072f78fc78d5af61c
Last affected
84181adae87f7a438ee0cc1b6caf006ae696a74b
Last affected
8a2855ee3cf2fb3443e12233fcbbea4a9492b683
Last affected
8b4a1bdbb044cb1693fd36cc134d8a1493b69b15
Last affected
8cea8ad8b825b0bf5884054af7499f1d5c3ebeb4
Last affected
98864d5c0b154eda7aeb2c2bffe7e7e1c97424bc
Last affected
a75a4591430919a6eb3d430aca396044fe3816d4
Last affected
a7ffc8f7396573bec401e0afcc073137522d5305
Last affected
b998e27547f986427730f033f4d1bcd028ffd08f
Last affected
c1d54bb7b2a80d0f153fd92a13e1b901778f17d3
Last affected
c4e7d8a3817bbdee218328efa9e482217038152b
Last affected
df048c59cfdb281f1e4f4fc647decefdc9a971d2
Last affected
ef43d41f671805406fd83cdf8ec5f54b1fa12c33
Last affected
f093bde91e329f18b7fc36f16f4de06ec7f181eb
Last affected
f2a597fa3dd1c7b15e0fee62f6932b253295803d
Last affected
fbb9837ad56e327f22c6b155e7b2fce796723e33
Type
GIT
Repo
https://github.com/mbed-tls/mbedtls
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
31458a18788b0cf0b722acda9bb2f2fe13a3fb32
Fixed
d15795acd5074e0b44e71f7ede8bdfe1b48591fc

Affected versions

Other

beta-oob-2
list
mbedos-2016q1-oob1
mbedos-2016q1-oob2
mbedos-2016q1-oob3
mbedos-release-15-11
mbedos-techcon-oob2

mbedos-16.*

mbedos-16.01-release
mbedos-16.03-release

mbedtls-1.*

mbedtls-1.3.10
mbedtls-1.4-dtls-preview

mbedtls-2.*

mbedtls-2.0.0
mbedtls-2.1.0
mbedtls-2.1.1
mbedtls-2.1.2
mbedtls-2.2.0
mbedtls-2.2.1
mbedtls-2.3.0
mbedtls-2.4.0
mbedtls-2.5.0
mbedtls-2.5.1

polarssl-1.*

polarssl-1.2.0
polarssl-1.2.1
polarssl-1.2.2
polarssl-1.2.3
polarssl-1.2.4
polarssl-1.2.5
polarssl-1.2.6
polarssl-1.3.0
polarssl-1.3.0-rc0
polarssl-1.3.1
polarssl-1.3.2
polarssl-1.3.3
polarssl-1.3.4
polarssl-1.3.5
polarssl-1.3.6
polarssl-1.3.7
polarssl-1.3.8
polarssl-1.3.9

yotta-2.*

yotta-2.2.1
yotta-2.2.2
yotta-2.2.3
yotta-2.3.0
yotta-2.3.1