CVE-2017-14032
EUVD-2017-554730.08.2017, 20:29
ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| arm | mbed_tls | 1.3.10 |
| arm | mbed_tls | 1.3.11 |
| arm | mbed_tls | 1.3.12 |
| arm | mbed_tls | 1.3.13 |
| arm | mbed_tls | 1.3.14 |
| arm | mbed_tls | 1.3.15 |
| arm | mbed_tls | 1.3.16 |
| arm | mbed_tls | 1.3.17 |
| arm | mbed_tls | 1.3.18 |
| arm | mbed_tls | 1.3.19 |
| arm | mbed_tls | 1.3.20 |
| arm | mbed_tls | 1.3.21 |
| arm | mbed_tls | 2.0.0 |
| arm | mbed_tls | 2.1.0 |
| arm | mbed_tls | 2.1.1 |
| arm | mbed_tls | 2.1.2 |
| arm | mbed_tls | 2.1.3 |
| arm | mbed_tls | 2.1.4 |
| arm | mbed_tls | 2.1.5 |
| arm | mbed_tls | 2.1.6 |
| arm | mbed_tls | 2.1.7 |
| arm | mbed_tls | 2.1.8 |
| arm | mbed_tls | 2.1.9 |
| arm | mbed_tls | 2.2.0 |
| arm | mbed_tls | 2.2.1 |
| arm | mbed_tls | 2.3.0 |
| arm | mbed_tls | 2.4.0 |
| arm | mbed_tls | 2.4.2 |
| arm | mbed_tls | 2.5.1 |
| arm | mbed_tls | 2.6.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References