Information disclosure in mbed TLS - CVE-2018-0498
Published: August 2, 2018 / Updated: August 2, 2018
Vulnerability identifier: #VU14173
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-0498
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists in ARM mbed TLS due to insufficient security restrictions imposed by the affected software when a cipher suite based on cipher block chaining (CBC) is used. A remote attacker who is able to observe and manipulate network packets can conduct a timing-based side-channel attack and partially recover the plaintext content.
Affected software
mbed TLS
Debian Linux
mbedtls (Ubuntu package)
mbedtls (Alpine package)
Debian Linux
mbedtls (Ubuntu package)
mbedtls (Alpine package)
How to mitigate CVE-2018-0498
Update to version 2.12.0, 2.7.5 or 2.1.14.
mbed TLS - addressed in versions 2.1.14, 2.7.5, 2.12.0
mbedtls (Ubuntu package) - update to 2.2.1-2ubuntu0.3
mbedtls (Alpine package) - update to 2.7.5-r0
mbedtls (Ubuntu package) - update to 2.2.1-2ubuntu0.3
mbedtls (Alpine package) - update to 2.7.5-r0