Critical severity · published Feb 13, 2018
CVE-2018-0488
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a…
9.8
CVSS
4.8%
EPSS
No
On KEV
Description
ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a crafted application packet within a TLS or DTLS session.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.8% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DL
Debian Linux · Debian
8.0; 9.0 · source: NVD
MT
Mbed Tls · Arm
1.3.0 before 1.3.22; 2.1.0 before 2.1.10; 2.2.0 before 2.7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-0488
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-0488
Third Party Advisory
http://www.securityfocus.com/bid/103057
Third Party Advisory
https://security.gentoo.org/glsa/201804-19
Mitigation
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-01
usn.ubuntu.com
https://usn.ubuntu.com/4267-1/
Third Party Advisory
https://www.debian.org/security/2018/dsa-4138
Third Party Advisory
https://www.debian.org/security/2018/dsa-4147
More from Mbed Tls
9.8
CVE-2026-34877
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0
9.8
CVE-2025-47917
Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation
9.8
CVE-2022-46393
An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0
9.8
CVE-2021-44732
Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtls_ssl_set_session() failure
9.8
CVE-2017-18187
In ARM mbed TLS before 2.7.0, there is a bounds-check bypass through an integer overflow in PSK identity parsing in the ssl_parse_client_psk_identity() function in…