CVE-2011-1923: Undefined Security Weakness

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095...

PT-2012-1170

Name of the Vulnerable Software and Affected Versions PolarSSL versions prior to 1.3.0 PolarSSL versions prior to 0.14.2 Description The issue concerns the Diffie-Hellman key-exchange implementation in PolarSSL, which does not properly validate a public parameter. This makes it easier for...

[SECURITY] Fedora 17 Update: polarssl-1.1.3-1.fc17

PolarSSL is a light-weight open source cryptographic and SSL/TLS library written in C. PolarSSL makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible...

Fedora 17 : polarssl-1.1.3-1.fc17 (2012-6963)

A security and bugfix release to PolarSSL http://polarssl.org/news http://polarssl.org/trac/wiki/SecurityAdvisory201201 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...