Polarssl vulnerabilities

Products

• Polarssl 15

Newest

• polarssl PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart,... CVE-2011-4574 9.8 CriticalOctober 27, 2021
• polarssl, debian linux, fedoraproject fedora +2 more A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak... CVE-2012-2130 7.4 HighDecember 6, 2019
• polarssl, trustedfirmware mbed tls, debian linux +2 more +4 more Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before... CVE-2015-8036 6.8 MediumNovember 2, 2015
• polarssl, trustedfirmware mbed tls, debian linux +3 more +5 more Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3... CVE-2015-5291 Fix available 6.8 MediumOctober 22, 2015
• polarssl, opensuse +1 more Memory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory... CVE-2014-9744 7.8 HighAugust 24, 2015
• polarssl, opensuse +1 more The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x... CVE-2015-1182 Fix available 7.5 HighJanuary 24, 2015
• polarssl Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a... CVE-2014-8628 Fix available 7.8 HighNovember 22, 2014
• polarssl PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote... CVE-2014-8627 5.0 MediumNovember 22, 2014
• polarssl, debian linux +1 more The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3... CVE-2014-4911 Fix available 5.0 MediumJuly 18, 2014
• polarssl Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using... CVE-2013-5914 6.8 MediumOctober 20, 2013
• polarssl The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery... CVE-2013-5915 Fix available 4.3 MediumOctober 4, 2013
• polarssl The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does... CVE-2013-4623 4.3 MediumSeptember 24, 2013
• polarssl Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to... CVE-2013-1621 4.3 MediumFebruary 8, 2013
• openssl, oracle openjdk, polarssl +2 more The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,... CVE-2013-0169 Public exploitFix available EPSS 35.6% 2.6 LowAugust 30, 2012
• polarssl The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not... CVE-2011-1923 4.0 MediumJune 20, 2012