Critical Vulnerability in Mbed TLS: RSA Decryption Plaintext Exposure
Summary
ALPINE-CVE-2018-19608: Arm Mbed TLS before 2.14.1, before 2.7.8, and before 2.1.17 allows a local unprivileged attacker to recover the plaintext of RSA decryption, which is used in RSA-without-(EC)DH(E) cipher suites. Affects mbedtls versions < 2.14.1-r0. Fixed in 2.14.1-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mbed TLS is an open-source cryptographic library designed to provide secure communication over networks. It supports various cryptographic protocols and algorithms, making it a popular choice for developers looking to implement secure features in their applications. However, certain versions of Mbed TLS are vulnerable to a security flaw that allows local unprivileged attackers to recover plaintext from RSA decryption, particularly when using RSA-without-(EC)DH(E) cipher suites.
Vulnerability Detail
The vulnerability identified as CVE-2018-19608 affects Mbed TLS versions prior to 2.14.1, 2.7.8, and 2.1.17. It allows an attacker with local access to exploit the RSA decryption process, potentially exposing sensitive plaintext data. This flaw arises from improper handling of cryptographic operations, which could lead to significant security breaches if exploited. The CVSS score for this vulnerability is 4.7, indicating a moderate level of risk.
How To Fix
Minimum fixed version
2.14.1-r0
This is the first release that contains the fix.
sudo apk add --upgrade mbedtlsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the affected systems to prevent unauthorized local access. However, the best course of action is to apply the patch as soon as possible.
Conclusion
The vulnerability CVE-2018-19608 in Mbed TLS poses a significant risk by allowing local attackers to recover plaintext from RSA decryption. It is crucial for users to update to the patched version to mitigate this risk and ensure the security of their applications.
See every vulnerability recorded for mbedtls →
FAQ
CVE-2018-19608 is a vulnerability in Mbed TLS that allows local unprivileged attackers to recover plaintext from RSA decryption.
Versions of Mbed TLS prior to 2.14.1, 2.7.8, and 2.1.17 are vulnerable to this issue.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without any signup.
Update Mbed TLS to version 2.14.1-r0 or later using the command 'apk add mbedtls=2.14.1-r0'.
If exploited, this vulnerability could lead to unauthorized access to sensitive data, compromising the security of the application.
References
Related vulnerabilities
Recent vulnerabilities recorded for mbedtls.
