Ubuntu
mbedtls package

  1. Xenial (16.04)
  2. Bug #1672686
  3. Comment #1

Comment 1 for bug 1672686

Revision history for this message
James Cowgill (jcowgill) wrote : Re: CVE-2017-2748 - Freeing of memory allocated on stack when validating a public key with a secp224k1 curve

I think that only polarssl 1.3.* is affected because polarssl <= 1.2 does not support elliptic curve crypto.