Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

polarssl polarssl 0.10.0 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-5915
The RSA-CRT implementation in PolarSSL prior to 1.2.9 does not properly perform Montgomery multiplication, which might allow remote malicious users to conduct a timing side-channel attack and retrieve RSA private keys.
Polarssl Polarssl 0.10.0Polarssl Polarssl 0.10.1Polarssl Polarssl 0.14.3Polarssl Polarssl 0.99Polarssl Polarssl 1.1.0Polarssl Polarssl 1.1.1Polarssl PolarsslPolarssl Polarssl 1.2.7Polarssl Polarssl 0.12.0Polarssl Polarssl 0.12.1Polarssl Polarssl 0.13.1Polarssl Polarssl 1.0.0Polarssl Polarssl 1.1.4Polarssl Polarssl 1.1.5Polarssl Polarssl 1.2.3Polarssl Polarssl 1.2.2Polarssl Polarssl 0.14.0Polarssl Polarssl 0.14.2Polarssl Polarssl 1.1.6Polarssl Polarssl 1.1.8Polarssl Polarssl 1.2.1Polarssl Polarssl 1.2.0
NA
CVE-2013-0169
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote malicious...
Openssl OpensslOracle Openjdk 1.7.0Oracle Openjdk 1.6.0Polarssl Polarssl 0.14.2Polarssl Polarssl 0.11.0Polarssl Polarssl 1.0.0Polarssl Polarssl 0.13.1Polarssl Polarssl 1.1.3Polarssl Polarssl 0.12.1Polarssl Polarssl 0.99Polarssl Polarssl 0.11.1Polarssl Polarssl 1.1.4Polarssl Polarssl 0.14.0Polarssl Polarssl 1.1.1Polarssl Polarssl 1.1.2Polarssl Polarssl 0.14.3Polarssl Polarssl 1.1.0Polarssl Polarssl 0.10.1Polarssl Polarssl 0.12.0Polarssl Polarssl 0.10.0
NA
CVE-2013-1621
Array index error in the SSL module in PolarSSL prior to 1.2.5 might allow remote malicious users to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.
Polarssl Polarssl 1.2.0Polarssl Polarssl 1.1.5Polarssl Polarssl 0.14.3Polarssl Polarssl 0.99Polarssl Polarssl 1.1.0Polarssl Polarssl 1.1.1Polarssl PolarsslPolarssl Polarssl 1.2.3Polarssl Polarssl 0.14.0Polarssl Polarssl 0.14.2Polarssl Polarssl 0.12.1Polarssl Polarssl 0.11.1Polarssl Polarssl 0.11.0Polarssl Polarssl 1.0.0Polarssl Polarssl 1.1.4Polarssl Polarssl 1.1.3Polarssl Polarssl 0.12.0Polarssl Polarssl 1.1.2Polarssl Polarssl 1.2.2Polarssl Polarssl 1.2.1Polarssl Polarssl 0.13.1Polarssl Polarssl 0.10.0
NA
CVE-2011-1923
The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL prior to 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle malicious users to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011...
Polarssl Polarssl 0.10.1Polarssl Polarssl 0.10.0Polarssl PolarsslPolarssl Polarssl 0.11.1Polarssl Polarssl 0.11.0Polarssl Polarssl 0.13.1Polarssl Polarssl 0.12.1Polarssl Polarssl 0.12.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook