CVE-2017-14032

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-14032
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14032.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-14032
Downstream
Related
Published
2017-08-30T20:29:00.337Z
Modified
2026-07-08T12:05:40.069768Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:arm:mbed_tls:1.3.19:*:*:*:*:*:*:*",
                "cpe:2.3:a:arm:mbed_tls:1.3.21:*:*:*:*:*:*:*",
                "cpe:2.3:a:arm:mbed_tls:2.1.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:arm:mbed_tls:2.1.9:*:*:*:*:*:*:*",
                "cpe:2.3:a:arm:mbed_tls:2.4.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:arm:mbed_tls:2.6.2:*:*:*:*:*:*:*"
            ],
            "vendor_product": "arm:mbed_tls",
            "extracted_events": [
                {
                    "introduced": "1.3.19"
                },
                {
                    "last_affected": "1.3.19"
                },
                {
                    "introduced": "1.3.21"
                },
                {
                    "last_affected": "1.3.21"
                },
                {
                    "introduced": "2.1.7"
                },
                {
                    "last_affected": "2.1.7"
                },
                {
                    "introduced": "2.1.9"
                },
                {
                    "last_affected": "2.1.9"
                },
                {
                    "introduced": "2.4.2"
                },
                {
                    "last_affected": "2.4.2"
                },
                {
                    "introduced": "2.6.2"
                },
                {
                    "last_affected": "2.6.2"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/mbed-tls/mbedtls

Affected ranges

Type
GIT
Repo
https://github.com/mbed-tls/mbedtls
Events
Introduced
015e48df6e2f15275161012fbb2544ce0a84c752
Last affected
f2a597fa3dd1c7b15e0fee62f6932b253295803d
Fixed
31458a18788b0cf0b722acda9bb2f2fe13a3fb32
Fixed
d15795acd5074e0b44e71f7ede8bdfe1b48591fc
Database specific 
{
    "cpe": [
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.16:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.18:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.20:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.3.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:trustedfirmware:mbed_tls:2.5.1:*:*:*:*:*:*:*"
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "1.3.10"
        },
        {
            "last_affected": "1.3.10"
        },
        {
            "introduced": "1.3.11"
        },
        {
            "last_affected": "1.3.11"
        },
        {
            "introduced": "1.3.12"
        },
        {
            "last_affected": "1.3.12"
        },
        {
            "introduced": "1.3.13"
        },
        {
            "last_affected": "1.3.13"
        },
        {
            "introduced": "1.3.14"
        },
        {
            "last_affected": "1.3.14"
        },
        {
            "introduced": "1.3.15"
        },
        {
            "last_affected": "1.3.15"
        },
        {
            "introduced": "1.3.16"
        },
        {
            "last_affected": "1.3.16"
        },
        {
            "introduced": "1.3.17"
        },
        {
            "last_affected": "1.3.17"
        },
        {
            "introduced": "1.3.18"
        },
        {
            "last_affected": "1.3.18"
        },
        {
            "introduced": "1.3.20"
        },
        {
            "last_affected": "1.3.20"
        },
        {
            "introduced": "2.0.0"
        },
        {
            "last_affected": "2.0.0"
        },
        {
            "introduced": "2.1.0"
        },
        {
            "last_affected": "2.1.0"
        },
        {
            "introduced": "2.1.1"
        },
        {
            "last_affected": "2.1.1"
        },
        {
            "introduced": "2.1.2"
        },
        {
            "last_affected": "2.1.2"
        },
        {
            "introduced": "2.1.3"
        },
        {
            "last_affected": "2.1.3"
        },
        {
            "introduced": "2.1.4"
        },
        {
            "last_affected": "2.1.4"
        },
        {
            "introduced": "2.1.5"
        },
        {
            "last_affected": "2.1.5"
        },
        {
            "introduced": "2.1.6"
        },
        {
            "last_affected": "2.1.6"
        },
        {
            "introduced": "2.1.8"
        },
        {
            "last_affected": "2.1.8"
        },
        {
            "introduced": "2.2.0"
        },
        {
            "last_affected": "2.2.0"
        },
        {
            "introduced": "2.2.1"
        },
        {
            "last_affected": "2.2.1"
        },
        {
            "introduced": "2.3.0"
        },
        {
            "last_affected": "2.3.0"
        },
        {
            "introduced": "2.4.0"
        },
        {
            "last_affected": "2.4.0"
        },
        {
            "introduced": "2.5.1"
        },
        {
            "last_affected": "2.5.1"
        }
    ]
}

Affected versions

1.*
1.3.10
1.3.11
1.3.12
1.3.13
1.3.14
1.3.15
1.3.16
1.3.17
1.3.18
1.3.20
2.*
2.0.0
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.8
2.2.0
2.2.1
2.3.0
2.4.0
2.5.1

Database specific

vanir_signatures 
[
    {
        "digest": {
            "length": 2262.0,
            "function_hash": "23535954794933034125050730467064723164"
        },
        "signature_version": "v1",
        "source": "https://github.com/mbed-tls/mbedtls/commit/d15795acd5074e0b44e71f7ede8bdfe1b48591fc",
        "signature_type": "Function",
        "target": {
            "function": "mbedtls_x509_crt_verify_with_profile",
            "file": "library/x509_crt.c"
        },
        "id": "CVE-2017-14032-5602eaa3",
        "deprecated": false
    },
    {
        "digest": {
            "length": 2466.0,
            "function_hash": "222329698236470483945104867179118980285"
        },
        "signature_version": "v1",
        "source": "https://github.com/mbed-tls/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32",
        "signature_type": "Function",
        "target": {
            "function": "x509_crt_verify_child",
            "file": "library/x509_crt.c"
        },
        "id": "CVE-2017-14032-5641768a",
        "deprecated": false
    },
    {
        "digest": {
            "length": 29159.0,
            "function_hash": "289384578258587814542314141494984662847"
        },
        "signature_version": "v1",
        "source": "https://github.com/mbed-tls/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32",
        "signature_type": "Function",
        "target": {
            "function": "mbedtls_strerror",
            "file": "library/error.c"
        },
        "id": "CVE-2017-14032-68c67a00",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "132424573133338098880192509041644689350",
                "136223290653824832292330108440460395254",
                "71226695291420032423883403561819135480",
                "207101480763087697553560554299684203715"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/mbed-tls/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32",
        "signature_type": "Line",
        "target": {
            "file": "library/error.c"
        },
        "id": "CVE-2017-14032-77efa648",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "29774057326914554908168141019178899840",
                "312912015695781082636950159593368822428",
                "220722481886817042393869537454351602259",
                "60383677106042717662555218753036354995",
                "224082031465045007063186258803681135732",
                "51015100275896819569311333920011941212",
                "301260361598108401763190589597944757320",
                "59901768938022454201162153540596856996",
                "32037573475342375789862870670452759019"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/mbed-tls/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32",
        "signature_type": "Line",
        "target": {
            "file": "library/x509_crt.c"
        },
        "id": "CVE-2017-14032-b38c5879",
        "deprecated": false
    },
    {
        "digest": {
            "length": 2328.0,
            "function_hash": "187294135977934297358467111738959912510"
        },
        "signature_version": "v1",
        "source": "https://github.com/mbed-tls/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32",
        "signature_type": "Function",
        "target": {
            "function": "mbedtls_x509_crt_verify_with_profile",
            "file": "library/x509_crt.c"
        },
        "id": "CVE-2017-14032-c33758f1",
        "deprecated": false
    },
    {
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "297508082841507766207153074088620982985",
                "193765838583188265181447748208443829958",
                "246008029411467398700936916418902399106",
                "170728984395405133853399714968408782878",
                "271212138821117569378509030157638532529",
                "246049324344814765838357334631555737022",
                "229676348833666410348666480313748689668",
                "86482101448153393178407467509000579557",
                "57218658069997918038981807154574011405",
                "220261421346282504819318476197674000641",
                "111667703861368524557872296946491606464",
                "86482101448153393178407467509000579557",
                "57218658069997918038981807154574011405",
                "220261421346282504819318476197674000641",
                "13388456810314230906762838641713333140",
                "315536337083492372142446775006730033251",
                "4270419841222123167981624894377912134",
                "289739310754905327002609558766051706047",
                "86482101448153393178407467509000579557",
                "33087967539940626196069781929922405868",
                "51190541300378967937168735493507131995",
                "218910488878099105102794744835010694097",
                "215431577958695108769703273527304932472"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/mbed-tls/mbedtls/commit/d15795acd5074e0b44e71f7ede8bdfe1b48591fc",
        "signature_type": "Line",
        "target": {
            "file": "library/x509_crt.c"
        },
        "id": "CVE-2017-14032-f89e6dcf",
        "deprecated": false
    }
]
vanir_signatures_modified 
"2026-07-08T12:05:40Z"
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14032.json"