Skip to content
Fencer Intel
high 8.1

CVE-2017-2784 json

An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before…

published 2017-04-20 9 y ago modified 2026-06-17 4 mo ago also EUVD-2017-11927

cvss
8.1
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
3.4%
EPSS 3.4% chance of exploitation in 30 days, percentile 88%
public exploits
0
none known

Summary

An exploitable free of a stack pointer vulnerability exists in the x509 certificate parsing code of ARM mbed TLS before 1.3.19, 2.x before 2.1.7, and 2.4.x before 2.4.2. A specially crafted x509 certificate, when parsed by mbed TLS library, can cause an invalid free of a stack pointer leading to a potential remote code execution. In order to exploit this vulnerability, an attacker can act as either a client or a server on a network to deliver malicious x509 certificates to vulnerable applications.

Patch / fix

  • mbedtls Debian 14, Debian 13, Debian 12 2.4.2-1

debian advisories DEBIAN-CVE-2017-2784

  • mbedtls Ubuntu 16.04 LTS 2.2.1-2ubuntu0.1

ubuntu advisories UBUNTU-CVE-2017-2784

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • mbedtls-3 openSUSE Tumbleweed 3.6.6-1.1
  • mbedtls-2 openSUSE Tumbleweed 2.27.0-1.2
  • mbedtls Package Hub 12 1.3.19-5.1

opensuse advisories openSUSE-SU-2026:11119-1openSUSE-SU-2024:11043-1openSUSE-SU-2017:0790-1openSUSE-SU-2017:0792-1

  • mbedtls Alpine 3.24, Alpine 3.23, Alpine 3.22 +17 more 2.4.2-r0
  • mbedtls2 Alpine 3.24, Alpine 3.23, Alpine 3.22 +2 more 2.4.2-r0
  • mbedtls3 Alpine 3.24 2.4.2-r0

alpine advisories ALPINE-CVE-2017-2784

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • mbedtls Arch Linux 2.4.2-1

arch linux advisories AVG-198

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2017-2784 updated cvss 8.1

mbedtls: ARM Mbedtls x509 ECDSA invalid public key use-after-free

  • Red Hat All currently supported Red Hat products
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

3.39% chance of exploitation in the next 30 days, higher than 88% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

  • talosintelligence.com http://www.talosintelligence.com/reports/TALOS-2017-0274/ referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.0 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 3.0 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

  • ARM mbed TLS

Classification

Weakness
  • CWE-295 Improper Certificate Validation

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.