Unscored DSA-4296-1 2 CVEs

mbedtls - security update

Published Sep 16, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	mbedtls	2.4.2-1+deb9u3

Vulnerabilities 2

Unscored —

CVE-2018-0497

ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recove…

mbedtls mbedtls mbedtls mbedtls3 Debian Ubuntu Alpine

Jul 28, 2018
Unscored —

CVE-2018-0498

ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows local users to achieve partial plaintext recovery (f…

mbedtls mbedtls mbedtls mbedtls3 Debian Ubuntu Alpine

Jul 28, 2018