EUVD-2014-4830

Malware in sbrugna...

CVE-2014-4911

The ssldecryptbuf function in library/ssltls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service crash via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit...

Design/Logic Flaw

The ssldecryptbuf function in library/ssltls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service crash via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit...

CVE-2014-4911

CVE-2014-4911 affectsPolarSSL: the ssl_decrypt_buf function in ssl_tls.c is vulnerable in 1.2.x before 1.2.11 and in 1.3.x before 1.3.8, allowing remote DoS (crash) via GCM cipher suites (as demonstrated with Defensics). Mitigation is upgrading to PolarSSL 1.2.11 or 1.3.8+ (or newer) where the is...