Описание
PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected] |
| lucid | ignored | end of life |
| precise | not-affected | |
| trusty | not-affected | |
| trusty/esm | DNE | trusty was not-affected |
| upstream | released | 1.3.9-1 |
| utopic | not-affected |
Показывать по
10
EPSS
Процентиль: 50%
0.00274
Низкий
5 Medium
CVSS2
Связанные уязвимости
nvd
около 11 лет назад
PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors.
debian
около 11 лет назад
PolarSSL 1.3.8 does not properly negotiate the signature algorithm to ...
github
больше 3 лет назад
PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors.
EPSS
Процентиль: 50%
0.00274
Низкий
5 Medium
CVSS2