Wind River Support Network

HomeDefectsLIN8-9036
Fixed

LIN8-9036 : Security Advisory - mbedtls - CVE-2018-9989

Created: Apr 16, 2018    Updated: Dec 24, 2018
Resolved Date: May 24, 2018
Found In Version: 8.0.0.25
Fix Version: 8.0.0.26
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.

https://nvd.nist.gov/vuln/detail/CVE-2018-9989

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube