Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:arm_mbed_tls_before_2.12.0,_before_2.7.5,_and_before_2.1.14:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductArm Mbed Tls Before 2.12.0, Before 2.7.5, And Before 2.1.14 (f5e33b45-f1e1-5586-a360-cb3744cc52bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0498 vulnerable 2026-06-08 05:10:23.976282 Details available
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based ciphersuite) via a cache-based side-channel attack.
Published: 2018-07-28T17:00:00.000Z
Updated: 2024-08-05T03:28:10.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0497 vulnerable 2026-06-08 05:10:23.975746 Details available
ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based ciphersuite) via a timing-based side-channel attack. This vulnerability exists because of an incorrect fix (with a wrong SHA-384 calculation) for CVE-2013-0169.
Published: 2018-07-28T17:00:00.000Z
Updated: 2024-08-05T03:28:11.012Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.