CVE-2014-4911

Name of the Vulnerable Software and Affected Versions PolarSSL versions prior to 1.2.11 PolarSSL versions 1.3.x prior to 1.3.8

Description The issue allows remote attackers to cause a denial of service, potentially disrupting the availability of protected information. This can be achieved through vectors related to the GCM ciphersuites. The Codenomicon Defensics toolkit has been used to demonstrate this issue.

Recommendations For PolarSSL versions prior to 1.2.11, update to version 1.2.11 or later. For PolarSSL versions 1.3.x prior to 1.3.8, update to version 1.3.8 or later.