CVE-2018-9989

ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input

published April 10, 2018

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02117 · 81.6th percentile
Published
2018-04-10T19:00Z
EPSS history
Timeline
  • 10 APR 19:00Z
    ARM mbed TLS before 2.1.11, before 2.7.2, and before 2.8.0 has a buffer over-read in ssl_parse_server_psk_hint() that could cause a crash on invalid input
    cvelistv5