Vulnerability Name:

CVE-2017-2784 (CCN-124800)

Assigned:2016-12-01
Published:2017-04-19
Updated:2022-04-19
Summary:An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.
CVSS v3 Severity:8.1 High (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.4 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
8.1 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
7.4 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): High
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.6 High (CCN CVSS v2 Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): High
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-295
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2017-2784

Source: CCN
Type: Talos Vulnerability Report TALOS-2017-0274
ARM Mbedtls x509 ECDSA invalid public key Remote Code Execution Vulnerability

Source: MISC
Type: Exploit, Technical Description, Third Party Advisory, VDB Entry
http://www.talosintelligence.com/reports/TALOS-2017-0274/

Source: XF
Type: UNKNOWN
arm-mbedtls-cve20172784-code-exec(124800)

Source: GENTOO
Type: UNKNOWN
GLSA-201706-18

Source: CCN
Type: ARM Limited Web site
SSL Library mbed TLS / PolarSSL: Download for free or buy a commercial license

Source: CONFIRM
Type: Mitigation, Vendor Advisory
https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-01

Vulnerable Configuration:Configuration 1:
  • cpe:/a:arm:mbed_tls:2.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:arm:mbed_tls:2.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:arm:mbed_tls:2.1.6:*:*:*:*:*:*:*
  • OR cpe:/a:arm:mbed_tls:2.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:arm:mbed_tls:2.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:arm:mbed_tls:2.4.0:*:*:*:*:*:*:*
  • OR cpe:/a:arm:mbed_tls:2.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:arm:mbed_tls:*:*:*:*:*:*:*:* (Version <= 1.3.18)
  • OR cpe:/a:arm:mbed_tls:2.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:arm:mbed_tls:2.1.1:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20172784
    V
    CVE-2017-2784
    2022-06-30
    oval:org.opensuse.security:def:112688
    P
    libmbedcrypto7-2.27.0-1.2 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:106165
    P
    libmbedcrypto7-2.27.0-1.2 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:25653
    P
    Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:25126
    P
    Security update for ovmf (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25498
    P
    Security update for icu (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:24924
    P
    Security update for xen (Important)
    2020-12-01
    oval:org.opensuse.security:def:25697
    P
    Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25207
    P
    Security update for tomcat (Important)
    2020-12-01
    oval:org.opensuse.security:def:25551
    P
    Security update for tomcat (Important)
    2020-12-01
    oval:org.opensuse.security:def:24935
    P
    Security update for screen (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26335
    P
    security update for go (Low)
    2020-12-01
    oval:org.opensuse.security:def:25264
    P
    Security update for memcached (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25639
    P
    Security update for libqt5-qtimageformats (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:24999
    P
    Security update for squid (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26370
    P
    Security update for mbedtls (Important)
    2020-12-01
    oval:org.opensuse.security:def:25348
    P
    Security update for ucode-intel (Moderate)
    2020-12-01
    oval:com.ubuntu.cosmic:def:201727840000000
    V
    CVE-2017-2784 on Ubuntu 18.10 (cosmic) - medium.
    2017-04-20
    oval:com.ubuntu.artful:def:20172784000
    V
    CVE-2017-2784 on Ubuntu 17.10 (artful) - medium.
    2017-04-20
    oval:com.ubuntu.trusty:def:20172784000
    V
    CVE-2017-2784 on Ubuntu 14.04 LTS (trusty) - medium.
    2017-04-20
    oval:com.ubuntu.bionic:def:201727840000000
    V
    CVE-2017-2784 on Ubuntu 18.04 LTS (bionic) - medium.
    2017-04-20
    oval:com.ubuntu.bionic:def:20172784000
    V
    CVE-2017-2784 on Ubuntu 18.04 LTS (bionic) - medium.
    2017-04-20
    oval:com.ubuntu.xenial:def:20172784000
    V
    CVE-2017-2784 on Ubuntu 16.04 LTS (xenial) - medium.
    2017-04-20
    oval:com.ubuntu.xenial:def:201727840000000
    V
    CVE-2017-2784 on Ubuntu 16.04 LTS (xenial) - medium.
    2017-04-20
    oval:com.ubuntu.cosmic:def:20172784000
    V
    CVE-2017-2784 on Ubuntu 18.10 (cosmic) - medium.
    2017-04-20
    oval:com.ubuntu.disco:def:201727840000000
    V
    CVE-2017-2784 on Ubuntu 19.04 (disco) - medium.
    2017-04-20
    oval:com.ubuntu.precise:def:20172784000
    V
    CVE-2017-2784 on Ubuntu 12.04 LTS (precise) - medium.
    2017-04-20
    BACK
    arm mbed tls 2.1.4
    arm mbed tls 2.1.5
    arm mbed tls 2.1.6
    arm mbed tls 2.1.2
    arm mbed tls 2.1.3
    arm mbed tls 2.4.0
    arm mbed tls 2.0.0
    arm mbed tls *
    arm mbed tls 2.1.0
    arm mbed tls 2.1.1