Debian DLA-331-1 : polarssl security update

A flaw was found in PolarSSl and mbed TLS : When the client creates its ClientHello message, due to insufficient bounds checking it can overflow the heap-based buffer containing the message while writing some extensions. Two extensions in particular could be used by a remote attacker to trigger t...

[SECURITY] [DLA 331-1] polarssl security update

Package : polarssl Version : 1.2.9-1deb6u5 CVE ID : CVE-2015-5291 A flaw was found in PolarSSl and mbed TLS: When the client creates its ClientHello message, due to insufficient bounds checking it can overflow the heap-based buffer containing the message while writing some extensions. Two...

DLA-331-1 polarssl - security update

Bulletin has no description...

PolarSSL Memory Disclosure Vulnerability

PolarSSL mbed TLS is a dual-authorization implementation of SSL, the TLS protocol, and its encryption and support algorithms. A memory leak vulnerability exists in PolarSSL versions prior to 1.3.9, which can be exploited by remote attackers to cause a denial of service memory exhaustion via a lar...

PT-2018-8853

Name of the Vulnerable Software and Affected Versions mbed TLS versions prior to 1.3.22 mbed TLS versions prior to 2.1.10 mbed TLS versions prior to 2.7.0 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to a buffer overflow. This occurs whe...

[SECURITY] Fedora 21 Update: mbedtls-1.3.11-1.fc21

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...

[SECURITY] Fedora 20 Update: mbedtls-1.3.11-1.fc20

Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...