https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:48:27 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-05862 cnvd-2017-05862 https://cve.radiocsirt.org/vuln/cnvd-2017-05862 https://cve.radiocsirt.org/vuln/euvd-2026-72501 EUVD-2026-72501 https://cve.radiocsirt.org/vuln/euvd-2026-72501 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2784 <p>An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.</p> <p>An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-2784 https://cve.radiocsirt.org/vuln/ghsa-5wj7-rhf5-hqx4 <p>An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.</p> <p>An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.</p> https://cve.radiocsirt.org/vuln/ghsa-5wj7-rhf5-hqx4 https://cve.radiocsirt.org/vuln/gsd-2017-2784 gsd-2017-2784 https://cve.radiocsirt.org/vuln/gsd-2017-2784 https://cve.radiocsirt.org/vuln/opensuse-su-2017:0790-1 <p>Security update for mbedtls</p> <p>Security update for mbedtls</p> https://cve.radiocsirt.org/vuln/opensuse-su-2017:0790-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-2784 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mbedtls</p> <p>An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: mbedtls</p> <p>An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-2784