Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

polarssl polarssl 1.1.2 vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2015-1182
The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1_sequence linked list, which allows remote attackers to cause a denial of service (crash) or possibly execute...
Opensuse Opensuse 13.2Polarssl Polarssl 1.0.0Polarssl Polarssl 1.1.0Polarssl Polarssl 1.1.5Polarssl Polarssl 1.1.6Polarssl Polarssl 1.2.12Polarssl Polarssl 1.2.2Polarssl Polarssl 1.2.3Polarssl Polarssl 1.3.0Polarssl Polarssl 1.3.6Polarssl Polarssl 1.3.7Polarssl Polarssl 1.1.1Polarssl Polarssl 1.1.2Polarssl Polarssl 1.2.0Polarssl Polarssl 1.2.1Polarssl Polarssl 1.2.6Polarssl Polarssl 1.2.7Polarssl Polarssl 1.3.2Polarssl Polarssl 1.3.3Polarssl Polarssl 1.1.3Polarssl Polarssl 1.1.4Polarssl Polarssl 1.2.10Polarssl Polarssl 1.2.11Polarssl Polarssl 1.2.8Polarssl Polarssl 1.2.9Polarssl Polarssl 1.3.4Polarssl Polarssl 1.3.5Polarssl Polarssl 1.1.7Polarssl Polarssl 1.1.8Polarssl Polarssl 1.2.4Polarssl Polarssl 1.2.5Polarssl Polarssl 1.3.1Polarssl Polarssl 1.3.8Polarssl Polarssl 1.3.9
NA
CVE-2013-5914
Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet....
Polarssl PolarsslPolarssl Polarssl 1.1.6Polarssl Polarssl 1.1.1Polarssl Polarssl 1.1.0Polarssl Polarssl 1.1.5Polarssl Polarssl 1.1.3Polarssl Polarssl 1.1.4Polarssl Polarssl 1.1.2Polarssl Polarssl 1.0.0
NA
CVE-2013-5915
The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys....
Polarssl Polarssl 0.10.0Polarssl Polarssl 0.10.1Polarssl Polarssl 0.14.3Polarssl Polarssl 0.99Polarssl Polarssl 1.1.0Polarssl Polarssl 1.1.1Polarssl PolarsslPolarssl Polarssl 1.2.7Polarssl Polarssl 0.12.0Polarssl Polarssl 0.12.1Polarssl Polarssl 0.13.1Polarssl Polarssl 1.0.0Polarssl Polarssl 1.1.4Polarssl Polarssl 1.1.5Polarssl Polarssl 1.2.3Polarssl Polarssl 1.2.2Polarssl Polarssl 0.14.0Polarssl Polarssl 0.14.2Polarssl Polarssl 1.1.6Polarssl Polarssl 1.1.8Polarssl Polarssl 1.2.1Polarssl Polarssl 1.2.0Polarssl Polarssl 0.11.0Polarssl Polarssl 0.11.1Polarssl Polarssl 1.1.2Polarssl Polarssl 1.1.3Polarssl Polarssl 1.2.6Polarssl Polarssl 1.2.5Polarssl Polarssl 1.2.4
NA
CVE-2013-4623
The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages during the SSL/TLS handshake, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certificate...
Polarssl Polarssl 1.2.7Polarssl Polarssl 1.2.0Polarssl Polarssl 1.1.0Polarssl Polarssl 1.2.5Polarssl Polarssl 1.2.6Polarssl Polarssl 1.1.5Polarssl Polarssl 1.1.6Polarssl Polarssl 1.2.1Polarssl Polarssl 1.2.2Polarssl Polarssl 1.1.1Polarssl Polarssl 1.1.2Polarssl Polarssl 1.2.3Polarssl Polarssl 1.2.4Polarssl Polarssl 1.1.3Polarssl Polarssl 1.1.4
NA
CVE-2013-1621
Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169....
Polarssl Polarssl 1.2.0Polarssl Polarssl 1.1.5Polarssl Polarssl 0.14.3Polarssl Polarssl 0.99Polarssl Polarssl 1.1.0Polarssl Polarssl 1.1.1Polarssl PolarsslPolarssl Polarssl 1.2.3Polarssl Polarssl 0.14.0Polarssl Polarssl 0.14.2Polarssl Polarssl 0.12.1Polarssl Polarssl 0.11.1Polarssl Polarssl 0.11.0Polarssl Polarssl 1.0.0Polarssl Polarssl 1.1.4Polarssl Polarssl 1.1.3Polarssl Polarssl 0.12.0Polarssl Polarssl 1.1.2Polarssl Polarssl 1.2.2Polarssl Polarssl 1.2.1Polarssl Polarssl 0.13.1Polarssl Polarssl 0.10.0Polarssl Polarssl 0.10.1
NA
CVE-2013-0169
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote...
Openssl OpensslOracle Openjdk 1.7.0Oracle Openjdk 1.6.0Polarssl Polarssl 0.14.2Polarssl Polarssl 0.11.0Polarssl Polarssl 1.0.0Polarssl Polarssl 0.13.1Polarssl Polarssl 1.1.3Polarssl Polarssl 0.12.1Polarssl Polarssl 0.99Polarssl Polarssl 0.11.1Polarssl Polarssl 1.1.4Polarssl Polarssl 0.14.0Polarssl Polarssl 1.1.1Polarssl Polarssl 1.1.2Polarssl Polarssl 0.14.3Polarssl Polarssl 1.1.0Polarssl Polarssl 0.10.1Polarssl Polarssl 0.12.0Polarssl Polarssl 0.10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
insecure direct object referenceCVE-2023-30736CVE-2023-39647CVE-2023-42793injectCVE-2023-20101CVE-2023-4497XXECVE-2023-5217
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook