SB2018100242 - Fedora 29 update for dislocker, dolphin-emu, julia, mbedtls, nekovm, nng
Published: October 2, 2018 Updated: April 24, 2025
Security Bulletin ID
SB2018100242
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information disclosure (CVE-ID: CVE-2018-0497)
The vulnerability allows a remote attacker to obtain potentially sensitive information.
The vulnerability exists in ARM mbed TLS due to incomplete fix for CVE-2013-0169 and improper calculation of the secure hash algorithm-384 (SHA-384) when using a cipher suite based on cipher block chaining (CBC). A remote attacker who is able to observe and manipulate network packets can conduct a timing-based side-channel attack and partially recover the plaintext content.
Remediation
Install update from vendor's website.