polarssl: denial of service
| Package(s): | polarssl | CVE #(s): | CVE-2014-4911 | ||||||||||||||||||||
| Created: | July 18, 2014 | Updated: | August 6, 2014 | ||||||||||||||||||||
| Description: | From the Debian advisory: A flaw was discovered in PolarSSL, a lightweight crypto and SSL/TLS library, which can be exploited by a remote unauthenticated attacker to mount a denial of service against PolarSSL servers that offer GCM ciphersuites. Potentially clients are affected too if a malicious server decides to execute the denial of service attack against its clients. | ||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||