CVE-2017-14032

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-14032
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14032.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-14032
Downstream
ALPINE (1)
DEBIAN (1)
MGASA (1)
openSUSE (4)
UBUNTU (1)
Related
openSUSE (4)
Published
2017-08-30T20:29:00Z
Modified
2026-10-22T07:12:53Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:arm:mbed_tls:2.6.2:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "2.6.2"
                        },
                        {
                            "last_affected":  "2.6.2"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "arm:mbed_tls"
        }
    ]
}
References

Affected packages

Git / github.com/Mbed-TLS/mbedtls

Affected ranges

Type
GIT
Repo
https://github.com/Mbed-TLS/mbedtls
Events
Introduced
98864d5c0b154eda7aeb2c2bffe7e7e1c97424bc
Last Affected
f2a597fa3dd1c7b15e0fee62f6932b253295803d
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:arm:mbed_tls:1.3.19:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.19"
                },
                {
                    "last_affected":  "1.3.19"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:arm:mbed_tls:1.3.21:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.21"
                },
                {
                    "last_affected":  "1.3.21"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:arm:mbed_tls:2.1.7:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.7"
                },
                {
                    "last_affected":  "2.1.7"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:arm:mbed_tls:2.1.9:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.9"
                },
                {
                    "last_affected":  "2.1.9"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:arm:mbed_tls:2.4.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.2"
                },
                {
                    "last_affected":  "2.4.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.10:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.10"
                },
                {
                    "last_affected":  "1.3.10"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.11:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.11"
                },
                {
                    "last_affected":  "1.3.11"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.12:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.12"
                },
                {
                    "last_affected":  "1.3.12"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.13:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.13"
                },
                {
                    "last_affected":  "1.3.13"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.14:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.14"
                },
                {
                    "last_affected":  "1.3.14"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.15:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.15"
                },
                {
                    "last_affected":  "1.3.15"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.16:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.16"
                },
                {
                    "last_affected":  "1.3.16"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.17:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.17"
                },
                {
                    "last_affected":  "1.3.17"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.18:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.18"
                },
                {
                    "last_affected":  "1.3.18"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:1.3.20:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "1.3.20"
                },
                {
                    "last_affected":  "1.3.20"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.0.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.0.0"
                },
                {
                    "last_affected":  "2.0.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.0"
                },
                {
                    "last_affected":  "2.1.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.1"
                },
                {
                    "last_affected":  "2.1.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.2"
                },
                {
                    "last_affected":  "2.1.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.3:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.3"
                },
                {
                    "last_affected":  "2.1.3"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.4:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.4"
                },
                {
                    "last_affected":  "2.1.4"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.5:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.5"
                },
                {
                    "last_affected":  "2.1.5"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.6:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.6"
                },
                {
                    "last_affected":  "2.1.6"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.1.8:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.1.8"
                },
                {
                    "last_affected":  "2.1.8"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.2.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.0"
                },
                {
                    "last_affected":  "2.2.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.2.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.2.1"
                },
                {
                    "last_affected":  "2.2.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.3.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.3.0"
                },
                {
                    "last_affected":  "2.3.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.4.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.4.0"
                },
                {
                    "last_affected":  "2.4.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:trustedfirmware:mbed_tls:2.5.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.5.1"
                },
                {
                    "last_affected":  "2.5.1"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

1.*
1.3.10
1.3.11
1.3.12
1.3.13
1.3.14
1.3.15
1.3.16
1.3.17
1.3.18
1.3.19
1.3.20
1.3.21
2.*
2.0.0
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
2.1.8
2.1.9
2.2.0
2.2.1
2.3.0
2.4.0
2.4.2
2.5.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14032.json"

Git / github.com/mbed-tls/mbedtls

Affected ranges

Type
GIT
Repo
https://github.com/mbed-tls/mbedtls
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
31458a18788b0cf0b722acda9bb2f2fe13a3fb32
Fixed
d15795acd5074e0b44e71f7ede8bdfe1b48591fc
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "fixed":  "31458a18788b0cf0b722acda9bb2f2fe13a3fb32"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        },
        {
            "range":  [
                {
                    "fixed":  "d15795acd5074e0b44e71f7ede8bdfe1b48591fc"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

Other
beta-oob-2
mbedos-release-15-11
mbedos-techcon-oob2
mbedtls-2.*
mbedtls-2.0.0
mbedtls-2.1.0
mbedtls-2.1.1
mbedtls-2.1.2
mbedtls-2.2.0
mbedtls-2.2.1
mbedtls-2.3.0
mbedtls-2.4.0
mbedtls-2.5.0
mbedtls-2.5.1
polarssl-1.*
polarssl-1.2.0
polarssl-1.2.1
polarssl-1.2.2
polarssl-1.2.4
polarssl-1.2.5
polarssl-1.2.6
polarssl-1.3.0
polarssl-1.3.0-rc0
polarssl-1.3.1
polarssl-1.3.2
polarssl-1.3.3
polarssl-1.3.4
polarssl-1.3.5
polarssl-1.3.6
polarssl-1.3.7
polarssl-1.3.8
polarssl-1.3.9
yotta-2.*
yotta-2.3.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14032.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "23535954794933034125050730467064723164",
            "length":  2262
        },
        "id":  "CVE-2017-14032-5602eaa3",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/mbed-tls/mbedtls/commit/d15795acd5074e0b44e71f7ede8bdfe1b48591fc",
        "target":  {
            "file":  "library/x509_crt.c",
            "function":  "mbedtls_x509_crt_verify_with_profile"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "289384578258587814542314141494984662847",
            "length":  29159
        },
        "id":  "CVE-2017-14032-68c67a00",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/mbed-tls/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32",
        "target":  {
            "file":  "library/error.c",
            "function":  "mbedtls_strerror"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "132424573133338098880192509041644689350",
                "136223290653824832292330108440460395254",
                "71226695291420032423883403561819135480",
                "207101480763087697553560554299684203715"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2017-14032-77efa648",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/mbed-tls/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32",
        "target":  {
            "file":  "library/error.c"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "297508082841507766207153074088620982985",
                "193765838583188265181447748208443829958",
                "246008029411467398700936916418902399106",
                "170728984395405133853399714968408782878",
                "271212138821117569378509030157638532529",
                "246049324344814765838357334631555737022",
                "229676348833666410348666480313748689668",
                "86482101448153393178407467509000579557",
                "57218658069997918038981807154574011405",
                "220261421346282504819318476197674000641",
                "111667703861368524557872296946491606464",
                "86482101448153393178407467509000579557",
                "57218658069997918038981807154574011405",
                "220261421346282504819318476197674000641",
                "13388456810314230906762838641713333140",
                "315536337083492372142446775006730033251",
                "4270419841222123167981624894377912134",
                "289739310754905327002609558766051706047",
                "86482101448153393178407467509000579557",
                "33087967539940626196069781929922405868",
                "51190541300378967937168735493507131995",
                "218910488878099105102794744835010694097",
                "215431577958695108769703273527304932472"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2017-14032-f89e6dcf",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/mbed-tls/mbedtls/commit/d15795acd5074e0b44e71f7ede8bdfe1b48591fc",
        "target":  {
            "file":  "library/x509_crt.c"
        }
    }
]
vanir_signatures_modified 
"2026-10-22T07:12:53Z"