CVE-2011-4574

PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer the RDTSC instruction. This instruction can be virtualized, and some virtual machine hosts have chosen to disable this...

CVE-2011-4574

CVE-2011-4574 concerns PolarSSL (MBed TLS) prior to v1.1, where the HAVEGE RNG uses the processor’s high-resolution timer via RDTSC. In virtualized environments RDTSC can be disabled or return zeros/predictable results, making the RNG potentially predictable. The affected line-item notes PolarSSL...