Wind River Support Network

HomeDefectsLIN8-10231

Fixed

LIN8-10231 : Security Advisory - mbedtls - CVE-2018-19608

Created: Dec 19, 2018 Updated: Feb 12, 2019

Resolved Date: Dec 27, 2018

Found In Version: 8.0.0.28

Fix Version: 8.0.0.29

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.

https://nvd.nist.gov/vuln/detail/CVE-2018-19608

CVEs

CVE-2018-19608