PT-2014-1775 · Polarssl · Polarssl

Publicado 2014-07-22 · Atualizado 2015-12-04 · CVE-2014-4911

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PolarSSL versions prior to 1.2.11 PolarSSL versions 1.3.x prior to 1.3.8

Description The issue allows remote attackers to cause a denial of service, potentially disrupting the availability of protected information. This can be achieved through vectors related to the GCM ciphersuites. The Codenomicon Defensics toolkit has been used to demonstrate this issue.

Recommendations For PolarSSL versions prior to 1.2.11, update to version 1.2.11 or later. For PolarSSL versions 1.3.x prior to 1.3.8, update to version 1.3.8 or later.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

BDU:2015-02149

CVE-2014-4911

DLA-36-1

DSA-2981-1

MGASA-2014-0315

Produtos afetados

Polarssl

Referências · 12

• http://secunia.com/advisories/60215 · Nota
• https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2014-02 · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=13764 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-4911 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4911 · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2014-0315 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2014-0315.html · Nota de Segurança
• https://debian.org/security/2014/dsa-2981 · Aviso do Fabricante
• http://debian.org/security/2014/dsa-2981 · Aviso do Fabricante
• http://debian.org/security/dsa-2981 · Nota
• https://polarssl.org/tech-updates/releases/polarssl-1.3.8-released · Nota
• https://bdu.fstec.ru/vul/2015-02149 · Nota de Segurança