Lucene search
Arch LinuxASA-201411-4HistoryNov 06, 2014 - 12:00 a.m.
polarssl: multiple issues
2014-11-0600:00:00
Arch Linux
lists.archlinux.org
16
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.009 Low
EPSS
Percentile
81.1%
-
CVE-2014-8627 (weak signature negotiation)
A mistake resulted in servers negotiating the lowest common hash from
signature_algorithms extension in TLS 1.2. -
CVE-2014-8628 (memory leaks)
Two issues were found that result in remotely triggerable memory leaks
when parsing crafted ClientHello messages or X.509 certificates.
Related
mageia
mageia
Updated polarssl package fix security vulnerabilities
2014-11-22 13:54:50
Updated polarssl & hiawatha packages fix security vulnerabilities
2015-05-05 16:36:50
nessus
nessus
Fedora 20 : polarssl-1.2.12-1.fc20 (2014-14898)
2014-11-24 00:00:00
openSUSE Security Update : polarssl (openSUSE-SU-2014:1457-1)
2014-11-20 00:00:00
Fedora 19 : polarssl-1.2.12-1.fc19 (2014-14912)
2014-11-24 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0481)
2022-01-28 00:00:00
Fedora Update for polarssl FEDORA-2014-14912
2014-11-23 00:00:00
Fedora Update for polarssl FEDORA-2014-14898
2014-11-23 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: polarssl-1.2.12-1.fc19
2014-11-22 12:43:01
[SECURITY] Fedora 20 Update: polarssl-1.2.12-1.fc20
2014-11-22 12:45:21
[SECURITY] Fedora 20 Update: polarssl-1.2.12-3.fc20
2015-01-30 04:31:47
prion
prion
Code injection
2014-11-24 15:59:00
Memory corruption
2015-08-24 15:59:00
Memory corruption
2015-08-24 15:59:00
ubuntucve
ubuntucve
cve
cve
securityvulns
securityvulns
[SECURITY] [DSA 3116-1] polarssl security update
2014-12-30 00:00:00
PolarSSL DoS
2014-12-30 00:00:00
debian
debian
[SECURITY] [DLA 129-1] polarssl security update
2015-01-03 21:32:56
[SECURITY] [DSA 3116-1] polarssl security update
2014-12-30 01:19:54
7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
0.009 Low
EPSS
Percentile
81.1%
Related for ASA-201411-4