UBUNTU-CVE-2017-14032

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2017-14032

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2017/UBUNTU-CVE-2017-14032.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2017-14032

Related

CVE-2017-14032

Published

2017-08-30T20:29:00Z

Modified

2017-08-30T20:29:00Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.

References

Affected packages

Ubuntu:16.04:LTS / mbedtls

Package

Name: mbedtls
Purl: pkg:deb/ubuntu/mbedtls?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.2.1-2ubuntu0.2

Affected versions

2.*

2.1.2-1

2.2.0-1

2.2.1-1

2.2.1-2

2.2.1-2ubuntu0.1

Ecosystem specific

{
    "availability": "No subscription required",
    "ubuntu_priority": "medium",
    "binaries": [
        {
            "binary_version": "2.2.1-2ubuntu0.2",
            "binary_name": "libmbedcrypto0"
        },
        {
            "binary_version": "2.2.1-2ubuntu0.2",
            "binary_name": "libmbedcrypto0-dbgsym"
        },
        {
            "binary_version": "2.2.1-2ubuntu0.2",
            "binary_name": "libmbedtls-dev"
        },
        {
            "binary_version": "2.2.1-2ubuntu0.2",
            "binary_name": "libmbedtls-doc"
        },
        {
            "binary_version": "2.2.1-2ubuntu0.2",
            "binary_name": "libmbedtls10"
        },
        {
            "binary_version": "2.2.1-2ubuntu0.2",
            "binary_name": "libmbedtls10-dbgsym"
        },
        {
            "binary_version": "2.2.1-2ubuntu0.2",
            "binary_name": "libmbedx509-0"
        },
        {
            "binary_version": "2.2.1-2ubuntu0.2",
            "binary_name": "libmbedx509-0-dbgsym"
        }
    ]
}