CVE-2014-8628

HIGH 7.8CVE-2014-8628 · Published 24/08/2015 · updated 17/06/2026

In short

CVE-2014-8628 is a HIGH (CVSS 7.8) vulnerability affecting polarssl (polarssl).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
polarssl polarssl	`= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.3.6= 1.3.7= 1.3.8≤ 1.2.11`	No fix yet

Description

Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted X.509 certificates. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2014-9744 for the ClientHello message issue.

References

More vulnerabilities in polarssl

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

polarssl

= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5= 1.3.6= 1.3.7= 1.3.8≤ 1.2.11

No fix yet

Description

More vulnerabilities in polarssl

See all →