Wind River Support Network

HomeDefectsLIN9-6706
Fixed

LIN9-6706 : Security Advisory - mbedtls - CVE-2018-9988

Created: Apr 16, 2018    Updated: Dec 24, 2018
Resolved Date: May 27, 2018
Found In Version: 9.0.0.15
Fix Version: 9.0.0.16
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() that could cause a crash on invalid input.

https://nvd.nist.gov/vuln/detail/CVE-2018-9988

Other Downloads

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube