Vulnerability in Arm Mbed TLS
CVE-2017-2784
An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.
Vulnerability class: Improper Certificate Validation
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.034 (88.7th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 89th percentile — 88.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.034 · newest: 0.034 · change: 0.000
Affected products
- Arm Mbed TLS — versions 2.4.0
- Arm Mbed TLS — versions 2.0.0, 2.1.0, 2.1.1
- Trustedfirmware Mbed TLS — versions 2.0.0, 2.1.0, 2.1.1
Weakness classification (CWE)
References
- security.gentoo.org/glsa/201706-18 (vendor-advisory)
- www.talosintelligence.com/reports/TALOS-2017-0274/ (Technical Description, Exploit, VDB Entry, Third Party Advisory)
- tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01 (Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-2784?
- CVE-2017-2784 is a high-severity vulnerability in Arm Mbed TLS, classified under Improper Certificate Validation. CVSS score: 8.1/10. Published 2017-04-20.
- How severe is CVE-2017-2784?
- High severity. CVSS v3 base score is 8.1 out of 10.