CVE-2014-8627

概要

参考情報

• lists.opensuse.org/opensuse-updates/2014-11/msg00079.html
• secunia.com/advisories/61220
• polarssl.org/tech-updates/releases/polarssl-1.3.9-released

polarssl のその他の脆弱性

• CVE-2011-4574緊急 9.8PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the p…
• CVE-2012-2130高 7.4A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman valu…
• CVE-2015-8036中 6.8Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a…
• CVE-2015-5291中 6.8Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allow…
• CVE-2014-9744高 7.8Memory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of ClientH…