Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-18187
7.5
HIGHCVSS v2
Published
February 14, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in library/ssl_srv.c.
Mbed-TLS/mbedtls
GitHubAn open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
GitHubAn open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.< 2.7.0NVD