CVE-2017-18187

In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity(...

Original description

The description as published by the source.

In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in library/ssl_srv.c.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2017-18187 mbedtls Fixed in: 2.7.0-r0
Debian DEBIAN-CVE-2017-18187 mbedtls Fixed in: 2.7.0-2

References

advisory securityfocus.com
advisory github.com
advisory security.gentoo.org
advisory debian.org
advisory debian.org
patch github.com
web usn.ubuntu.com