PolarSSL 'asn1_get_sequence_of' Function Uninitialized Pointer RCE

PolarSSL contains a flaw when parsing ASN.1 sequences from X.509 certificates due to freeing an uninitialized pointer by the function 'asn1getsequenceof' within file 'asn1parse.c'. An unauthenticated, remote attacker, using a specially crafted certificate, can exploit this flaw to cause a denial ...

CVE-2015-1182

The asn1getsequenceof function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1sequence linked list, which allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted...

CVE-2015-1182

The CVE-2015-1182 issue affects PolarSSL 1.0–1.2.12 and 1.3.x up to 1.3.9, where asn1_get_sequence_of in library/asn1parse.c fails to initialize a pointer in the asn1_sequence linked list. This can allow a remote attacker to crash the application or potentially execute arbitrary code via a crafte...