CVE-2013-5914

Опубликовано: 26 окт. 2013

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.

Ссылки

http://www.debian.org/security/2013/dsa-2782
https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-04
Patch
Vendor Advisory
http://www.debian.org/security/2013/dsa-2782
https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-04
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:polarssl:polarssl:*:*:*:*:*:*:*:*

Версия до 1.1.7 (включая)

cpe:2.3:a:polarssl:polarssl:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:1.1.0:*:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:1.1.0:rc0:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:1.1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:1.1.2:*:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:1.1.3:*:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:1.1.4:*:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:1.1.5:*:*:*:*:*:*:*

cpe:2.3:a:polarssl:polarssl:1.1.6:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02853

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2013-5914

ubuntu

больше 12 лет назад

Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.

CVE-2013-5914

debian

больше 12 лет назад

Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarS ...

GHSA-vpwv-hwrv-72hw

github

больше 3 лет назад

Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.

EPSS

Процентиль: 86%

0.02853

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-119