Wind River Support Network

HomeDefectsLIN8-9024
Fixed

LIN8-9024 : Security Advisory - mbedtls - CVE-2018-9988

Created: Apr 16, 2018    Updated: Dec 24, 2018
Resolved Date: May 24, 2018
Found In Version: 8.0.0.25
Fix Version: 8.0.0.26
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input.

https://nvd.nist.gov/vuln/detail/CVE-2018-9988

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube