CVE-2017-14032

ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentication via an X.509 certificate chain with many intermediates. NOTE: although mbed TLS was formerly known as PolarSSL, the releases shipped with the PolarSSL name are not affected.

• CWE-287

• http://www.debian.org/security/2017/dsa-3967
• https://bugs.debian.org/873557Issue Tracking, Patch, Third Party Advisory
• https://github.com/ARMmbed/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32Issue Tracking, Patch, Third Party Advisory
• https://github.com/ARMmbed/mbedtls/commit/d15795acd5074e0b44e71f7ede8bdfe1b48591fcIssue Tracking, Patch, Third Party Advisory
• https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-02Vendor Advisory
• http://www.debian.org/security/2017/dsa-3967
• https://bugs.debian.org/873557Issue Tracking, Patch, Third Party Advisory
• https://github.com/ARMmbed/mbedtls/commit/31458a18788b0cf0b722acda9bb2f2fe13a3fb32Issue Tracking, Patch, Third Party Advisory
• https://github.com/ARMmbed/mbedtls/commit/d15795acd5074e0b44e71f7ede8bdfe1b48591fcIssue Tracking, Patch, Third Party Advisory
• https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2017-02Vendor Advisory

Published

Aug 30, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14026In Ice Qube Thermal Management Center versions prior to vers…
• CVE-2017-14027A Use of Hard-coded Credentials issue was discovered in Kore…
• CVE-2017-14028A Resource Exhaustion issue was discovered in Moxa NPort 511…
• CVE-2017-14029An Uncontrolled Search Path Element issue was discovered in …
• CVE-2017-14030An issue was discovered in Moxa MXview v2.8 and prior. The u…
• CVE-2017-14031An Improper Access Control issue was discovered in Trihedral…
• CVE-2017-14033The decode method in the OpenSSL::ASN1 module in Ruby before…
• CVE-2017-14034The restore_tqb_pixels function in hevc_filter.c in libavcod…
• CVE-2017-14035CrushFTP 8.x before 8.2.0 has a serialization vulnerability.
• CVE-2017-14036CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.
• CVE-2017-14037CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP heade…
• CVE-2017-14038CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vu…