« List of all CVEs

CVE-2017-14032

Published: 8/30/2017 Last updated: 8/5/2024 Reserved: 8/30/2017

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.

CNA assigner: mitre (8254265b-2729-46b6-b9e3-3dfca2d5bfca) Requested by: n/a

Opam packages affected (1)

conf-mbedtls

Products affected (1)

Product Vendor Version
n/a n/a (Server Core installation)

References (10)