Wind River Support Network

HomeDefectsLIN9-7860

Fixed

LIN9-7860 : Security Advisory - mbedtls - CVE-2018-19608

Created: Dec 19, 2018 Updated: Feb 25, 2019

Resolved Date: Feb 20, 2019

Found In Version: 9.0.0.19

Fix Version: 9.0.0.20

Severity: Standard

Applicable for: Wind River Linux 9

Component/s: Userspace

Description

Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.

https://nvd.nist.gov/vuln/detail/CVE-2018-19608

CVEs

CVE-2018-19608