CVE-2015-8036 Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbit...
MediumCVSS 6.8
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, which is not properly handled when creating a ClientHello message to resume a session. NOTE: this identifier was SPLIT from CVE-2015-5291 per ADT3 due to different affected version ranges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polarssl | <= 1.2.17 | No fix listed |
| TrustedFirmware Mbed TLS | >= 1.3.0, < 1.3.14 | 1.3.14 |
| TrustedFirmware Mbed TLS | >= 2.0.0, < 2.1.2 | 2.1.2 |
| debian linux | = 7.0 | No fix listed |
| debian linux | = 8.0 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
| opensuse | = 13.2 | No fix listed |
References
- FEDORA-2015-30a417bea9 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:1928 mailing-list third-party-advisory vendor-advisory
- DSA-3468 mailing-list third-party-advisory vendor-advisory
- guidovranken.files.wordpress.com third-party-advisory
- guidovranken.wordpress.com third-party-advisory
- tls.mbed.org vendor-advisory
- Debian Security Tracker CVE-2015-8036 vendor-advisory