CVE-2018-19608

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.34%

Published

Dec 5, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites.

Weaknesses (CWE)

CWE-269

Affected Products (3)

arm · mbed_tls (up to 2.1.17)vulnerable

arm · mbed_tls (up to 2.7.8)vulnerable

arm · mbed_tls (up to 2.14.1)vulnerable

References (6)

http://cat.eyalro.net/

Third Party Advisory

https://tls.mbed.org/tech-updates/releases/mbedtls-2.14.1-2.7.8-and-2.1.17-released

Third Party Advisory

https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-03

Third Party Advisory

http://cat.eyalro.net/

Third Party Advisory

https://tls.mbed.org/tech-updates/releases/mbedtls-2.14.1-2.7.8-and-2.1.17-released

Third Party Advisory

https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-03

Third Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs