CVE-2014-4911

The ssldecryptbuf function in library/ssltls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service crash via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit...

CVE-2014-4911

CVE-2014-4911 affectsPolarSSL: the ssl_decrypt_buf function in ssl_tls.c is vulnerable in 1.2.x before 1.2.11 and in 1.3.x before 1.3.8, allowing remote DoS (crash) via GCM cipher suites (as demonstrated with Defensics). Mitigation is upgrading to PolarSSL 1.2.11 or 1.3.8+ (or newer) where the is...

[SECURITY] Fedora 19 Update: polarssl-1.2.11-1.fc19

PolarSSL is a light-weight open source cryptographic and SSL/TLS library written in C. PolarSSL makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

[SECURITY] Fedora 20 Update: polarssl-1.2.11-1.fc20

PolarSSL is a light-weight open source cryptographic and SSL/TLS library written in C. PolarSSL makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

[SECURITY] [DSA 2981-1] polarssl security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2981-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 18, 2014 http://www.debian.org/security/faq -...

Fedora 19 : polarssl-1.2.11-1.fc19 (2014-8310)

Update to 1.2.11 - CVE-2014-4911 rhbz1118929, rhbz1118930 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

PolarSSL DoS

DoS on GCM cypher...

Fedora 20 : polarssl-1.2.11-1.fc20 (2014-8316)

Update to 1.2.11 - CVE-2014-4911 rhbz1118929, rhbz1118930 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Debian DSA-2981-1 : polarssl - security update

A flaw was discovered in PolarSSL, a lightweight crypto and SSL/TLS library, which can be exploited by a remote unauthenticated attacker to mount a denial of service against PolarSSL servers that offer GCM ciphersuites. Potentially clients are affected too if a malicious server decides to execute...

[SECURITY] [DSA 2981-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2981-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 18, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2981-1] polarssl security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2981-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 18, 2014 http://www.debian.org/security/faq -...

DSA-2981-1 polarssl - security update

Bulletin has no description...

Debian Security Advisory DSA 2981-1 (polarssl - security update)

A flaw was discovered in PolarSSL, a lightweight crypto and SSL/TLS library, which can be exploited by a remote unauthenticated attacker to mount a denial of service against PolarSSL servers that offer GCM ciphersuites. Potentially clients are affected too if a malicious server decides to execute...

Debian: Security Advisory (DSA-2981-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for polarssl FEDORA-2014-7263

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for polarssl FEDORA-2014-7261

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : polarssl-1.2.10-2.fc20 (2014-7263)

Update to 1.2.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 19 : polarssl-1.2.10-2.fc19 (2014-7261)

Update to 1.2.10 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

[SECURITY] Fedora 19 Update: polarssl-1.2.10-2.fc19

PolarSSL is a light-weight open source cryptographic and SSL/TLS library written in C. PolarSSL makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

[SECURITY] Fedora 20 Update: polarssl-1.2.10-2.fc20

PolarSSL is a light-weight open source cryptographic and SSL/TLS library written in C. PolarSSL makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...