4.3

CVE-2013-1621

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Polarssl ≫ Polarssl Version <= 1.2.4
Polarssl ≫ Polarssl Version0.10.0
Polarssl ≫ Polarssl Version0.10.1
Polarssl ≫ Polarssl Version0.11.0
Polarssl ≫ Polarssl Version0.11.1
Polarssl ≫ Polarssl Version0.12.0
Polarssl ≫ Polarssl Version0.12.1
Polarssl ≫ Polarssl Version0.13.1
Polarssl ≫ Polarssl Version0.14.0
Polarssl ≫ Polarssl Version0.14.2
Polarssl ≫ Polarssl Version0.14.3
Polarssl ≫ Polarssl Version0.99 Updatepre1
Polarssl ≫ Polarssl Version0.99 Updatepre3
Polarssl ≫ Polarssl Version0.99 Updatepre4
Polarssl ≫ Polarssl Version0.99 Updatepre5
Polarssl ≫ Polarssl Version1.0.0
Polarssl ≫ Polarssl Version1.1.0
Polarssl ≫ Polarssl Version1.1.0 Updaterc0
Polarssl ≫ Polarssl Version1.1.0 Updaterc1
Polarssl ≫ Polarssl Version1.1.1
Polarssl ≫ Polarssl Version1.1.2
Polarssl ≫ Polarssl Version1.1.3
Polarssl ≫ Polarssl Version1.1.4
Polarssl ≫ Polarssl Version1.1.5
Polarssl ≫ Polarssl Version1.2.0
Polarssl ≫ Polarssl Version1.2.1
Polarssl ≫ Polarssl Version1.2.2
Polarssl ≫ Polarssl Version1.2.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.69% 0.709
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.