PO
Product
Polarssl
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch
Add Polarssl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-4574 | 9.8 | Oct 27 | PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm Affected: before 1.1.0 |
| CVE-2012-2130 | 7.4 | Dec 6 | A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys Affected: 1.0.0 through 1.1.1; 0.99; 0.99 |
| CVE-2015-8036 | – | Nov 2 | Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and… Affected: through 1.2.17 |
| CVE-2015-5291 | – | Nov 2 | Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial… Affected: 1.0.0 before 1.2.17 |
| CVE-2014-9744 | – | Aug 24 | Memory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of ClientHello messages Affected: through 1.3.8 |
| CVE-2014-8628 | – | Aug 24 | Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted X.509… Affected: through 1.2.11; 1.3.0; 1.3.1; 1.3.2; 1.3.3; 1.3.4; +4 more |
| CVE-2015-1182 | – | Jan 27 | The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1_sequence linked… Affected: 1.0.0; 1.1.0; 1.1.0; 1.1.0; 1.1.1; 1.1.2; +31 more |
| CVE-2014-8627 | – | Nov 24 | PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors Affected: 1.3.8 |
| CVE-2014-4911 | – | Jul 22 | The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related… Affected: 1.3.0; 1.3.0; 1.3.0; 1.3.1; 1.3.2; 1.3.3; +15 more |
| CVE-2013-5914 | – | Oct 26 | Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet Affected: through 1.1.7; 1.0.0; 1.1.0; 1.1.0; 1.1.0; 1.1.1; +5 more |
| CVE-2013-5915 | – | Oct 4 | The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack… Affected: through 1.2.8; 0.10.0; 0.10.1; 0.11.0; 0.11.1; 0.12.0; +28 more |
| CVE-2013-4623 | – | Sep 30 | The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages during the SSL/TLS handshake, which allows… Affected: 1.1.0; 1.1.0; 1.1.0; 1.1.1; 1.1.2; 1.1.3; +11 more |
| CVE-2013-1621 | – | Feb 8 | Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during… Affected: through 1.2.4; 0.10.0; 0.10.1; 0.11.0; 0.11.1; 0.12.0; +22 more |
| CVE-2013-0169 | – | Feb 8 | The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on… Affected: 0.10.0; 0.10.1; 0.11.0; 0.11.1; 0.12.0; 0.12.1; +16 more |
| CVE-2011-1923 | – | Jun 20 | The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle… Affected: through 0.14.0; 0.10.0; 0.10.1; 0.11.0; 0.11.1; 0.12.0; +2 more |
Showing 15