Approved changes feed: RSS · Atom

cpe:2.3:a:arm:mbed_tls:2.6.2:*:*:*:*:*:*:*

part: a version: 2.6.2 update: *

VendorArm (992f6a5c-1bc7-5785-a659-421ca2a38af9)
ProductMbed Tls (8f45e1c2-2d75-5689-ba40-a760faee92f0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libmbedtls-dev purl2cpe 2026-06-01 10:16:54.492548
pkg:deb/ubuntu/libmbedtls-dev purl2cpe 2026-06-01 10:16:54.492549
pkg:github/armmbed/mbedtls purl2cpe 2026-06-01 10:16:54.492551
pkg:github/mbed-tls/mbedtls purl2cpe 2026-06-01 10:16:54.492552
pkg:rpm/fedora/mbedtls purl2cpe 2026-06-01 10:16:54.492554
pkg:rpm/opensuse/mbedtls purl2cpe 2026-06-01 10:16:54.492555

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14032 vulnerable 2026-06-08 05:08:49.130340 Details available
ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.
Published: 2017-08-30T20:00:00.000Z
Updated: 2024-08-05T19:13:41.938Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.