CVE-2011-4574

PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer the RDTSC instruction. This instruction can be virtualized, and some virtual machine hosts have chosen to disable this...

CVE-2011-4574

CVE-2011-4574 concerns PolarSSL (MBed TLS) prior to v1.1, where the HAVEGE RNG uses the processor’s high-resolution timer via RDTSC. In virtualized environments RDTSC can be disabled or return zeros/predictable results, making the RNG potentially predictable. The affected line-item notes PolarSSL...

CVE-2011-4574: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer the RDTSC instruction. This instruction can be virtualized, and some virtual machine hosts have chosen to disable this...

PT-2021-8355

Name of the Vulnerable Software and Affected Versions PolarSSL versions prior to v1.1 Description The issue concerns the use of the HAVEGE random number generation algorithm, which relies on timing information from the processor's high resolution timer, specifically the RDTSC instruction. This...