{"id":"CVE-2013-5914","aliases":["DSA-2782-1","EUVD-2013-5748","GHSA-vpwv-hwrv-72hw","UBUNTU-CVE-2013-5914"],"status":"published","title":"Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using...","description":"Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02997,"percentile":0.87441,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2013-10-20T00:00:00Z","modified":"2026-06-16T23:59:44Z","affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"polarssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-1~deb6u1"}]}],"versions":["0.12.1-1","0.12.1-1squeeze1","0.14.3-1","1.0.0-1","1.0.0-2","1.0.0-2+s390x","1.0.0-3","1.1.0-1","1.1.1-1","1.1.2-1","1.1.3-1","1.1.4-1","1.1.4-2","1.2.0-1","1.2.2-1","1.2.3-1","1.2.4-1","1.2.5-1","1.2.6-1","1.2.7-1","1.2.8-1","1.2.8-2"],"bundled":3},{"source":"osv","ecosystem":"Debian:7","package":"polarssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.9-1~deb7u1"}]}],"versions":["1.1.4-2","1.2.0-1","1.2.2-1","1.2.3-1","1.2.4-1","1.2.5-1","1.2.6-1","1.2.7-1","1.2.8-1","1.2.8-2","1.2.9-1~deb6u1","1.2.9-1~deb6u2","1.2.9-1~deb6u3","1.2.9-1~deb6u4","1.2.9-1~deb6u5"],"bundled":3}],"products":[{"vendor":"polarssl","product":"polarssl"}],"references":[{"url":"https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-04","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","report"]},{"url":"http://www.debian.org/security/2013/dsa-2782","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5914"},{"url":"https://github.com/advisories/GHSA-vpwv-hwrv-72hw"},{"url":"https://ubuntu.com/security/CVE-2013-5914","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-5914","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2013-5914","description":"Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.","status":"published","published":"2013-10-26T17:00:00Z","modified":"2024-09-16T16:38:29.592Z","updated_at":"2026-11-02T14:34:55.508771Z"}],"euvd":[{"id":"EUVD-2013-5748","description":"Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.","status":"published","published":"2013-10-26T17:00:00Z","modified":"2024-09-16T16:38:29Z","updated_at":"2026-11-03T00:55:49.526752Z"}],"ghsa":[{"id":"GHSA-vpwv-hwrv-72hw","title":"Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using...","description":"Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.","status":"published","published":"2022-05-17T04:59:18Z","modified":"2023-01-28T05:03:05Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:54.031093Z"}],"nvd":[{"id":"CVE-2013-5914","description":"Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.","status":"published","published":"2013-10-26T17:55:03.417Z","modified":"2026-06-16T23:59:44.423Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:40.988689Z"}],"osv":[{"id":"DSA-2782-1","title":"polarssl - several","status":"published","published":"2013-10-20T00:00:00Z","modified":"2026-03-09T01:23:17.348474Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"UBUNTU-CVE-2013-5914","description":"Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.","status":"withdrawn","published":"2013-10-26T17:55:00Z","modified":"2025-07-16T07:31:26.300298Z","updated_at":"2026-11-02T15:54:07.421078Z"}]}}