Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rwm6-hmj6-r6h5

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.

EPSS

Процентиль: 57%
0.00357
Низкий

Связанные уязвимости

ubuntu
около 13 лет назад

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.

nvd
около 13 лет назад

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.

debian
около 13 лет назад

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL be ...

fstec
почти 12 лет назад

Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить доступность защищаемой информации

EPSS

Процентиль: 57%
0.00357
Низкий