CVE-2014-4911 The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersui...
MediumCVSS 5.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polarssl | = 1.3.0 | No fix listed |
| polarssl | = 1.3.0-alpha1 | No fix listed |
| polarssl | = 1.3.0-rc0 | No fix listed |
| polarssl | = 1.3.1 | No fix listed |
| polarssl | = 1.3.2 | No fix listed |
| polarssl | = 1.3.3 | No fix listed |
| polarssl | = 1.3.4 | No fix listed |
| polarssl | = 1.3.5 | No fix listed |
| polarssl | = 1.3.6 | No fix listed |
| polarssl | = 1.3.7 | No fix listed |
| polarssl | <= 1.2.10 | No fix listed |
| polarssl | = 1.2.0 | No fix listed |
| polarssl | = 1.2.1 | No fix listed |
| polarssl | = 1.2.2 | No fix listed |
| polarssl | = 1.2.3 | No fix listed |
| polarssl | = 1.2.4 | No fix listed |
| polarssl | = 1.2.5 | No fix listed |
| polarssl | = 1.2.6 | No fix listed |
| polarssl | = 1.2.7 | No fix listed |
| polarssl | = 1.2.8 | No fix listed |
| polarssl | = 1.2.9 | No fix listed |
| debian linux | = 6.0 | No fix listed |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- 60215 third-party-advisory
- DSA-2981 vendor-advisory
- polarssl.org patch vendor-advisory