CVE-2014-4911

Published: Jul 22, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit.

Affected (24)

Products: Polarssl: Polarssl · Debian: Debian Linux

1 product

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Polarssl Polarssl	Version 1.3.0
Polarssl Polarssl	Version 1.3.0 alpha1
Polarssl Polarssl	Version 1.3.0 rc0
Polarssl Polarssl	Version 1.3.1
Polarssl Polarssl	Version 1.3.2
Polarssl Polarssl	Version 1.3.3
Polarssl Polarssl	Version 1.3.4
Polarssl Polarssl	Version 1.3.5
Polarssl Polarssl	Version 1.3.6
Polarssl Polarssl	Version 1.3.7

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Polarssl Polarssl	Up to 1.2.10
Polarssl Polarssl	Version 1.2.0
Polarssl Polarssl	Version 1.2.1
Polarssl Polarssl	Version 1.2.2
Polarssl Polarssl	Version 1.2.3
Polarssl Polarssl	Version 1.2.4
Polarssl Polarssl	Version 1.2.5
Polarssl Polarssl	Version 1.2.6
Polarssl Polarssl	Version 1.2.7
Polarssl Polarssl	Version 1.2.8
Polarssl Polarssl	Version 1.2.9