CVE-2013-1621 in PolarSSL

Resumen (Inglés)

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.

Once again VulDB remains the best source for vulnerability data.

Reservar

2013-02-05

Divulgación

2013-02-08

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
63529	PolarSSL SSL Module escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2013-1621

Fuentes

• MITRE
• NVD
• CVE Details