CVE-2018-1000061

CVE-2018-1000061

ARM mbedTLS version development branch, 2.7.0 and earlier contains a CWE-670, Incorrect condition control flow leading to incorrect return, leading to data loss vulnerability in ssl_write_real(), library/ssl_tls.c:7142 that can result in Leads to data loss, can be escalated to DoS and authorization bypass in application protocols. This attack appear to be exploitable via network connectivity.

Source: CVE-2018-1000061

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다