CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors...

5CVSS6.5AI score0.0209EPSS

Exploits0References3

OSV•added 2014/08/05 8:8 p.m.•8 views

MGASA-2014-0315 Updated polarssl packages fix security vulnerability

A flaw was discovered in PolarSSL, a lightweight crypto and SSL/TLS library, which can be exploited by a remote unauthenticated attacker to mount a denial of service against PolarSSL servers that offer GCM ciphersuites. Potentially clients are affected too if a malicious server decides to execute...

5CVSS6.5AI score0.02427EPSS

Exploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by