Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-3671

Высокий

ALT-PU-2017-3671: package mbedtls update to version 2.5.1-alt1.S1

Источник
errata.altlinux.org
Дата публикации
30.07.2017
Дата обновления
30.07.2017
Устраненные уязвимости
1
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades mbedtls to version 2.5.1-alt1.S1.

Устраненные уязвимости1

Ссылки1

ALT-PU-2017-3671https://errata.altlinux.org/ALT-PU-2017-3671

Связанные уязвимости

ubuntu логотип

CVE-2017-14032

CVSS3: 8.1
ubuntu
около 9 лет назад

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.

nvd логотип

CVE-2017-14032

CVSS3: 8.1
nvd
около 9 лет назад

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.

debian логотип

CVE-2017-14032

CVSS3: 8.1
debian
около 9 лет назад

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentic ...

github логотип

GHSA-6v28-r64j-r4w6

CVSS3: 8.1
github
больше 4 лет назад

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.