Oval Definition:oval:org.opensuse.security:def:201714032
Revision Date:2022-06-30Version:1
Title:CVE-2017-14032
Description:

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-14032
openSUSE-SU-2017:2731-1
openSUSE-SU-2017:2736-1
Mitre CVE-2017-14032
SUSE CVE-2017-14032
openSUSE-SU-2017:2731-1
openSUSE-SU-2017:2736-1
Platform(s):openSUSE Leap 42.2
openSUSE Leap 42.3
openSUSE Tumbleweed
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 12 SP3
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Package Hub for SUSE Linux Enterprise 12
Product(s):
Definition Synopsis
  • openSUSE Leap 42.2 is installed
  • AND Package Information
  • libmbedtls9-1.3.19-16.1 is installed
  • AND libmbedtls9 is signed with openSUSE key
  • OR
  • libmbedtls9-32bit-1.3.19-16.1 is installed
  • AND libmbedtls9-32bit is signed with openSUSE key
  • OR
  • mbedtls-1.3.19-16.1 is installed
  • AND mbedtls is signed with openSUSE key
  • OR
  • mbedtls-devel-1.3.19-16.1 is installed
  • AND mbedtls-devel is signed with openSUSE key
  • Definition Synopsis
  • openSUSE Leap 42.3 is installed
  • AND Package Information
  • libmbedtls9-1.3.19-18 is installed
  • AND libmbedtls9 is signed with openSUSE key
  • OR
  • libmbedtls9-32bit-1.3.19-18 is installed
  • AND libmbedtls9-32bit is signed with openSUSE key
  • OR
  • mbedtls-1.3.19-18 is installed
  • AND mbedtls is signed with openSUSE key
  • OR
  • mbedtls-devel-1.3.19-18 is installed
  • AND mbedtls-devel is signed with openSUSE key
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 is installed
  • AND Package Information
  • libmbedtls9-1.3.19-8 is installed
  • OR libmbedtls9-32bit-1.3.19-18 is installed
  • OR mbedtls-1.3.19-8 is installed
  • OR mbedtls-devel-1.3.19-8 is installed
  • Definition Synopsis
  • openSUSE Tumbleweed is installed
  • AND Package Information
  • libmbedcrypto7-2.27.0-1.2 is installed
  • OR libmbedcrypto7-32bit-2.27.0-1.2 is installed
  • OR libmbedtls13-2.27.0-1.2 is installed
  • OR libmbedtls13-32bit-2.27.0-1.2 is installed
  • OR libmbedx509-1-2.27.0-1.2 is installed
  • OR libmbedx509-1-32bit-2.27.0-1.2 is installed
  • OR mbedtls-devel-2.27.0-1.2 is installed
  • Definition Synopsis
  • SUSE Package Hub for SUSE Linux Enterprise 12 is installed
  • AND Package Information
  • libmbedtls9-1.3.19-8.1 is installed
  • OR mbedtls-devel-1.3.19-8.1 is installed
  • BACK