PT-2014-1775
CVE-2014-4911
·
تاريخ النشر
2014-07-22
·
تاريخ التحديث
2015-12-04
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
PolarSSL versions prior to 1.2.11
PolarSSL versions 1.3.x prior to 1.3.8
Description
The issue allows remote attackers to cause a denial of service, potentially disrupting the availability of protected information. This can be achieved through vectors related to the GCM ciphersuites. The Codenomicon Defensics toolkit has been used to demonstrate this issue.
Recommendations
For PolarSSL versions prior to 1.2.11, update to version 1.2.11 or later.
For PolarSSL versions 1.3.x prior to 1.3.8, update to version 1.3.8 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾