CVE-2018-0487
CRITICALARM mbed TLS <1.3.22/<2.1.10/<2.7.0 - RCE or DoS via RSASSA-PSS Verification
Title source: llmDescription
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted certificate chain that is mishandled during RSASSA-PSS signature verification within a TLS or DTLS session.
References (6)
Core 6
Core References
Third Party Advisory vendor-advisory
x_refsource_debian
https://www.debian.org/security/2018/dsa-4147
Third Party Advisory vendor-advisory
x_refsource_debian
https://www.debian.org/security/2018/dsa-4138
Mitigation, Vendor Advisory x_refsource_confirm
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/103056
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201804-19
Vendor Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/4267-1/
Scores
CVSS v3
9.8
EPSS
0.0512
EPSS Percentile
89.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
Status
published
Products (3)
arm/mbed_tls
1.3.8 - 1.3.22
debian/debian_linux
8.0
debian/debian_linux
9.0
Published
Feb 13, 2018
Tracked Since
Feb 18, 2026