CVE-2014-9744

概要

参考情報

• lists.opensuse.org/opensuse-updates/2014-11/msg00079.html
• polarssl.org/tech-updates/releases/polarssl-1.3.9-released · Patch

polarssl のその他の脆弱性

• CVE-2011-4574緊急 9.8PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the p…
• CVE-2012-2130高 7.4A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman valu…
• CVE-2015-8036中 6.8Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a…
• CVE-2015-5291中 6.8Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allow…
• CVE-2014-8628高 7.8Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a…