GCVE - cpe:2.3:a:polarssl:polarssl:1.2.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:polarssl:polarssl:1.2.5:*:*:*:*:*:*:*

part: a version: 1.2.5 update: *

Vendor	Polarssl (`b74f876d-c9c7-5be8-a8f4-d7716de8f35e`)
Product	Polarssl (`4e2abeea-f33a-5ac7-91c8-4b9138e27c05`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:gem/polarssl`	purl2cpe	2026-06-01 10:11:16.193189
`pkg:rpm/opensuse/polarssl`	purl2cpe	2026-06-01 10:11:16.193191

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-1182`	vulnerable	2026-06-08 05:06:25.131618	Details available The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1_sequence linked list, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ASN.1 sequence in a certificate. Published: 2015-01-27T15:00:00.000Z Updated: 2024-08-06T04:33:20.872Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148829.html http://secunia.com/advisories/62270 http://lists.fedoraproject.org/pipermail/package-announce/2015-January/148903.html http://lists.opensuse.org/opensuse-updates/2015-02/msg00003.html https://security.gentoo.org/glsa/201801-15	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4911`	vulnerable	2026-06-08 05:05:46.407500	Details available The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit. Published: 2014-07-22T14:00:00.000Z Updated: 2024-08-06T11:27:37.011Z Open on db.gcve.eu Reference links https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2014-02 http://www.debian.org/security/2014/dsa-2981 http://secunia.com/advisories/60215	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5915`	vulnerable	2026-06-08 05:04:54.703692	Details available The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys. Published: 2013-10-04T17:00:00.000Z Updated: 2024-08-06T17:29:42.703Z Open on db.gcve.eu Reference links http://secunia.com/advisories/55084 http://lists.fedoraproject.org/pipermail/package-announce/2013-October/119014.html http://www.securityfocus.com/bid/62771 http://osvdb.org/98049 http://www.debian.org/security/2013/dsa-2782	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-4623`	vulnerable	2026-06-08 05:04:48.780838	Details available The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages during the SSL/TLS handshake, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certificate message that contains a PEM encoded certificate. Published: 2013-09-30T20:00:00.000Z Updated: 2024-08-06T16:52:26.950Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2013-September/116351.html https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-03 http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115922.html https://bugzilla.redhat.com/show_bug.cgi?id=997767 http://lists.fedoraproject.org/pipermail/package-announce/2013-September/115927.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

PolarSSL 1.2.5

Notes

PURL mappings

Vulnerability references

Contribute