Vulnerability in Arm Mbed TLS
CVE-2017-2784
An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.
Vulnerability class: Improper Certificate Validation
EPSS: 0.034 (88.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Arm Mbed Tls — versions 2.4.0
- Arm Mbed_tls — versions 2.0.0, 2.1.0, 2.1.1
- Trustedfirmware Mbed_tls — versions 2.0.0, 2.1.0, 2.1.1
Weakness classification (CWE)
References
- talos-cna@cisco.com (vendor-advisory, x_refsource_GENTOO)
- talos-cna@cisco.com (Technical Description, Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
- talos-cna@cisco.com (x_refsource_CONFIRM, Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-2784?
- CVE-2017-2784 is a high-severity vulnerability in Arm Mbed TLS, classified under Improper Certificate Validation. CVSS score: 8.1/10. Published 2017-04-20.
- How severe is CVE-2017-2784?
- High severity. CVSS v3 base score is 8.1 out of 10.