Skip to contentPolarssl Polarssl vulnerabilities
- polarsslPolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart,...CVE-2011-45749.8 Critical
- polarssl, debian linux, fedoraproject fedora +2 moreA Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak...CVE-2012-21307.4 High
- polarssl, trustedfirmware mbed tls, debian linux +2 more +4 moreHeap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before...CVE-2015-80366.8 Medium
- polarssl, trustedfirmware mbed tls, debian linux +3 more +5 moreHeap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3...CVE-2015-5291Fix available6.8 Medium
- polarssl, opensuse +1 moreMemory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory...CVE-2014-97447.8 High
- polarssl, opensuse +1 moreThe asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x...CVE-2015-1182Fix available7.5 High
- polarsslMemory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a...CVE-2014-8628Fix available7.8 High
- polarsslPolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote...CVE-2014-86275.0 Medium
- polarssl, debian linux +1 moreThe ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3...CVE-2014-4911Fix available5.0 Medium
- polarsslBuffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using...CVE-2013-59146.8 Medium
- polarsslThe RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery...CVE-2013-5915Fix available4.3 Medium
- polarsslThe x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does...CVE-2013-46234.3 Medium
- polarsslArray index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to...CVE-2013-16214.3 Medium
- openssl, oracle openjdk, polarssl +2 moreThe TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK,...CVE-2013-0169Public exploitFix availableEPSS 35.6%2.6 Low
- polarsslThe Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not...CVE-2011-19234.0 Medium