CVE-2018-0488

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a crafted application packet within a TLS or DTLS session.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0	ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0

References

http://www.securityfocus.com/bid/103057Third Party Advisory, VDB Entry
https://security.gentoo.org/glsa/201804-19Third Party Advisory
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01Mitigation, Vendor Advisory
https://usn.ubuntu.com/4267-1/
https://www.debian.org/security/2018/dsa-4138Third Party Advisory
https://www.debian.org/security/2018/dsa-4147Third Party Advisory
http://www.securityfocus.com/bid/103057Third Party Advisory, VDB Entry
https://security.gentoo.org/glsa/201804-19Third Party Advisory
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01Mitigation, Vendor Advisory
https://usn.ubuntu.com/4267-1/
https://www.debian.org/security/2018/dsa-4138Third Party Advisory
https://www.debian.org/security/2018/dsa-4147Third Party Advisory

Timeline

Published: Feb 13, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-04896.5Shibboleth XMLTooling-C before 1.6.4, as used in Shibboleth Service Provider before 2.6.1.4 on Windows and other products, mishandles digita CVE-2018-04907.5An issue was discovered in Tor before 0.2.9.15, 0.3.1.x before 0.3.1.10, and 0.3.2.x before 0.3.2.10. The directory-authority protocol-list CVE-2018-04917.5A use-after-free issue was discovered in Tor 0.3.2.x before 0.3.2.10. It allows remote attackers to cause a denial of service (relay crash) CVE-2018-04927.0Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.CVE-2018-04937.2remctld in remctl before 3.14, when an attacker is authorized to execute a command that uses the sudo option, has a use-after-free that lead CVE-2018-04946.5GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation CVE-2018-04954.7Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through t CVE-2018-04967.5Directory traversal issues in the D-Mod extractor in DFArc and DFArc2 (as well as in RTsoft's Dink Smallwood HD / ProtonSDK version) before CVE-2018-04975.9ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based c CVE-2018-04984.7ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (for a CBC based cipher CVE-2018-04996.1A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HT CVE-2018-05009.8Curl_smtp_escape_eob in lib/smtp.c in curl 7.54.1 to and including curl 7.60.0 has a heap-based buffer overflow that might be exploitable by