İçeriğe atla
Noroxi

polarssl kayıtları

polarssl üreticisine ait 15 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%73,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 21

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

15 kayıt
  • CVE-2011-4574
    39İzleyin

    PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm.

    KritikCVSS 9,8İstismar yokEPSS %1

    polarssl · polarssl26 Eki 2021

  • CVE-2014-9744
    32İzleyin

    Memory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of ClientH

    YüksekCVSS 7,8İstismar yokEPSS %2

    polarssl · polarssl24 Ağu 2015

  • CVE-2014-8628
    32İzleyin

    Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a

    YüksekCVSS 7,8İstismar yokEPSS %1

    polarssl · polarssl24 Ağu 2015

  • CVE-2015-1182
    31İzleyin

    The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize

    YüksekCVSS 7,5İstismar yokEPSS %3

    polarssl · polarssl27 Oca 2015

  • CVE-2012-2130
    30İzleyin

    A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman valu

    YüksekCVSS 7,4İstismar yokEPSS %2

    polarssl · polarssl6 Ara 2019

  • CVE-2015-5291
    28İzleyin

    Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allow

    OrtaCVSS 6,8İstismar yokEPSS %3

    polarssl · polarssl2 Kas 2015

  • CVE-2013-5914
    28İzleyin

    Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to e

    OrtaCVSS 6,8İstismar yokEPSS %2

    polarssl · polarssl26 Eki 2013

  • CVE-2015-8036
    28İzleyin

    Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a

    OrtaCVSS 6,8İstismar yokEPSS %2

    polarssl · polarssl2 Kas 2015

  • CVE-2013-0169
    21İzleyin

    The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly c

    DüşükCVSS 2,6Kavram kanıtıEPSS %35

    openssl · openssl8 Şub 2013

  • CVE-2014-4911
    21İzleyin

    The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial

    OrtaCVSS 5,0İstismar yokEPSS %2

    polarssl · polarssl22 Tem 2014

  • CVE-2014-8627
    21İzleyin

    PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via un

    OrtaCVSS 5,0İstismar yokEPSS %2

    polarssl · polarssl24 Kas 2014

  • CVE-2013-5915
    18İzleyin

    The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers

    OrtaCVSS 4,3İstismar yokEPSS %2

    polarssl · polarssl4 Eki 2013

  • CVE-2013-1621
    18İzleyin

    Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving

    OrtaCVSS 4,3İstismar yokEPSS %2

    polarssl · polarssl8 Şub 2013

  • CVE-2013-4623
    18İzleyin

    The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages duri

    OrtaCVSS 4,3İstismar yokEPSS %1

    polarssl · polarssl30 Eyl 2013

  • CVE-2011-1923
    16İzleyin

    The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes

    OrtaCVSS 4,0İstismar yokEPSS %1

    polarssl · polarssl20 Haz 2012