CVE-2014-8628

Mô tả

Tham khảo

• lists.opensuse.org/opensuse-updates/2014-11/msg00079.html
• debian.org/security/2014/dsa-3116
• polarssl.org/tech-updates/releases/polarssl-1.2.12-released
• polarssl.org/tech-updates/releases/polarssl-1.3.9-released

Lỗ hổng khác của polarssl

• CVE-2011-4574NGHIÊM TRỌNG 9.8PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the p…
• CVE-2012-2130CAO 7.4A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman valu…
• CVE-2015-8036TRUNG BÌNH 6.8Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a…
• CVE-2015-5291TRUNG BÌNH 6.8Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allow…
• CVE-2014-9744CAO 7.8Memory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of ClientH…