CVE-2018-1000520

ARM mbedTLS version 2.7.0 and earlier contains a Ciphersuite Allows Incorrectly Signed Certificates vulnerability in mbedtlssslgetverifyresult that can result in ECDSA-signed certificates are accepted, when only RSA-signed ones should be.. This attack appear to be exploitable via Peers negotiate ...

CVE-2018-1000520

CVE-2018-1000520 affects ARM mbedTLS up to version 2.7.0. The vulnerability lies in the function mbedtls_ssl_get_verify_result() , which can incorrectly accept an ECDSA-signed certificate when only RSA-signed certificates should be accepted. The attack is exploitable via peers negotiating a TLS-E...