[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuganj1euOGkMXfipgCAywIAlo2wcCkqGtWZN6Tk4FnY":3,"g5a-risk:CVE-2018-0488":153},{"success":4,"data":5,"meta":151},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":85,"weaknesses":86,"weaknessesCount":95,"isActivelyExploited":96,"cisaInfo":15,"otxData":15,"relatedBlogPosts":97,"seoMetadata":98,"configurations":123,"relatedVendorCves":149,"notableEvents":150},"CVE-2018-0488","What is CVE-2018-0488?","ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption) via a crafted application packet within a TLS or DTLS session.","ARM mbed TLS before 1.3.22, before 2.1.10, and before 2.7.0, when the truncated HMAC extension and CBC are used, allows remote attackers to execute arbitrary...","2018-02-13T15:29:00.263","2020-08-24T17:37:01.14",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.04793,[39,39,39,39,39,39,39],"Critical",[43,48,53],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"arm","mbed_tls","*","cpe:2.3:a:arm:mbed_tls:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",3,[58,64,68,74,78,82],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F103057","Securityfocus",[62,63],"Third Party Advisory","VDB Entry",{"url":65,"source":66,"tags":67},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201804-19","Gentoo",[62],{"url":69,"source":70,"tags":71},"https:\u002F\u002Ftls.mbed.org\u002Ftech-updates\u002Fsecurity-advisories\u002Fmbedtls-security-advisory-2018-01","Mbed",[72,73],"Mitigation","Vendor Advisory",{"url":75,"source":76,"tags":77},"https:\u002F\u002Fusn.ubuntu.com\u002F4267-1\u002F","Ubuntu",[],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4138","Debian",[62],{"url":83,"source":80,"tags":84},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2018\u002Fdsa-4147",[62],6,[87],{"id":88,"name":89,"description":90,"extendedDescription":91,"status":92,"abstraction":93,"structure":94},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":99,"metaDescription":100,"keywords":101,"canonicalUrl":102,"structuredData":103},"What is CVE-2018-0488? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-0488, a critical severity cyber security vulnerability from 2018. ARM mbed TLS before 1.3.22, before 2.1.10, and before 2....","CVE-2018-0488, CVE-2018-0488 vulnerability, CVE-2018-0488 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, arm security, debian security, mbed_tls vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2018-0488",{"@context":104,"@type":105,"headline":99,"description":100,"datePublished":10,"dateModified":11,"author":106,"publisher":110,"about":114,"mainEntityOfPage":118,"articleSection":121,"keywords":122},"https:\u002F\u002Fschema.org","TechArticle",{"@type":107,"name":108,"url":109},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":107,"name":108,"url":109,"logo":111},{"@type":112,"url":113},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":115,"name":6,"description":116,"additionalType":117},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":119,"@id":120},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-0488","Cybersecurity","CVE-2018-0488, CVE-2018-0488 vulnerability, CVE-2018-0488 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[124,141],{"Operator":15,"Negate":15,"Nodes":125},[126],{"Operator":127,"Negate":15,"CPEMatch":128},"OR",[129,133,137],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":130,"VersionStartExcluding":15,"VersionStartIncluding":131,"VersionEndExcluding":132,"VersionEndIncluding":15},"954AD2C5-6373-487B-9087-A5E7AAFD28DE","1.3.0","1.3.22",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":134,"VersionStartExcluding":15,"VersionStartIncluding":135,"VersionEndExcluding":136,"VersionEndIncluding":15},"340E6D5D-20BA-4FC1-88C8-3E8EC40AEBBB","2.1.0","2.1.10",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":139,"VersionEndExcluding":140,"VersionEndIncluding":15},"9826C85D-D9A8-48DA-8800-BCFF87A37C0B","2.2.0","2.7.0",{"Operator":15,"Negate":15,"Nodes":142},[143],{"Operator":127,"Negate":15,"CPEMatch":144},[145,147],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":148,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":152,"version":33},1792268910545,{"score":154,"band":155,"action":156,"scoredAt":157},56,"Medium","Plan remediation","2026-10-16T06:43:23.802339+00:00"]