Lucene search
Gentoo FoundationMGASA-2019-0027HistoryJan 10, 2019 - 1:53 p.m.
Updated mbedtls packages fix security vulnerability
2019-01-1013:53:49
Gentoo Foundation
advisories.mageia.org
8
0.001 Low
EPSS
Percentile
25.5%
A vulnerability was found in mbedTLS which allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites (CVE-2018-19608).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 6 | noarch | mbedtls | < 2.7.8-1 | mbedtls-2.7.8-1.mga6 |
References
bugs.mageia.org/show_bug.cgi?id=24064
lists.fedoraproject.org/archives/list/[email protected]/thread/JPMHKBJDZVFFML2CJYXG3ELX7ADDG6ET/
tls.mbed.org/tech-updates/releases/mbedtls-2.14.0-2.7.7-and-2.1.16-released
tls.mbed.org/tech-updates/releases/mbedtls-2.14.1-2.7.8-and-2.1.17-released
tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2018-03
Related
cvelist
cvelist
CVE-2018-19608
2018-12-05 22:00:00
prion
prion
Code injection
2018-12-05 22:29:00
ubuntucve
ubuntucve
CVE-2018-19608
2018-12-05 00:00:00
nessus
nessus
Fedora 29 : mbedtls (2018-571ea64f3d)
2019-01-03 00:00:00
Fedora 28 : mbedtls (2018-1f6ca69276)
2019-01-03 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: mbedtls-2.14.1-1.fc29
2018-12-17 19:13:04
[SECURITY] Fedora 28 Update: mbedtls-2.14.1-1.fc28
2018-12-17 02:28:21
[SECURITY] Fedora 29 Update: mbedtls-2.16.3-1.fc29
2019-10-07 01:36:28
debiancve
debiancve
CVE-2018-19608
2018-12-05 22:29:00
cve
cve
CVE-2018-19608
2018-12-05 22:29:00
openvas
openvas
Mageia: Security Advisory (MGASA-2019-0027)
2022-01-28 00:00:00
Fedora Update for mbedtls FEDORA-2018-571ea64f3d
2019-05-07 00:00:00
Fedora Update for mbedtls FEDORA-2018-1f6ca69276
2018-12-18 00:00:00
osv
osv
CVE-2018-19608
2018-12-05 22:29:00
freebsd
freebsd
Mbed TLS -- Local timing attack on RSA decryption
2018-11-28 00:00:00
alpinelinux
alpinelinux
CVE-2018-19608
2018-12-05 22:29:00