Unscored DLA-1518-1 4 CVEs

polarssl - security update

Published Sep 25, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	polarssl	1.3.9-2.1+deb8u4

Vulnerabilities 4

Unscored —

CVE-2018-0497

ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recove…

mbedtls mbedtls mbedtls mbedtls3 Debian Ubuntu Alpine

Jul 28, 2018
Unscored —

CVE-2018-0498

ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (f…

mbedtls mbedtls mbedtls mbedtls3 Debian Ubuntu Alpine

Jul 28, 2018
Unscored —

CVE-2018-9988

ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_key_exchange() th…

mbedtls mbedtls Debian Ubuntu

Apr 10, 2018
Unscored —

CVE-2018-9989

ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that c…

mbedtls mbedtls Debian Ubuntu

Apr 10, 2018