« List of all CVEs

CVE-2018-0498

Published: 7/28/2018 Last updated: 8/5/2024 Reserved: 11/27/2017

ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack.

CNA assigner: debian (79363d38-fa19-49d1-9214-5f28da3f3ac5) Requested by: n/a

Opam packages affected (1)

conf-mbedtls

Products affected (1)

Product Vendor Version
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 n/a n/a

References (8)