Improper Certificate Validation in mbedtls - CVE-2017-2784

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU32141

Improper Certificate Validation in mbedtls - CVE-2017-2784

Published: April 20, 2017 / Updated: July 28, 2020


Vulnerability identifier: #VU32141
CSH Severity: High
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-2784
CWE-ID: CWE-295
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.


Affected software

mbedtls
Arch Linux
Gentoo Linux
Fedora
Opensuse
mbedtls (Alpine package)
mbedtls
SUSE Package Hub for SUSE Linux Enterprise

How to mitigate CVE-2017-2784

Install update from vendor's website.

mbedtls - update to 2.4.2
mbedtls (Alpine package) - update to 2.4.2-r0
mbedtls - addressed in versions 2.4.2-1.el5, 2.4.2-1.el6, 2.4.2-1.el7, 2.4.2-1.fc24, 2.4.2-1.fc25, 2.4.2-1.fc26

External References

Related Security Bulletins