4.3

CVE-2013-1621

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.

Data is provided by the National Vulnerability Database (NVD)
Polarssl ≫ Polarssl Version <= 1.2.4
Polarssl ≫ Polarssl Version0.10.0
Polarssl ≫ Polarssl Version0.10.1
Polarssl ≫ Polarssl Version0.11.0
Polarssl ≫ Polarssl Version0.11.1
Polarssl ≫ Polarssl Version0.12.0
Polarssl ≫ Polarssl Version0.12.1
Polarssl ≫ Polarssl Version0.13.1
Polarssl ≫ Polarssl Version0.14.0
Polarssl ≫ Polarssl Version0.14.2
Polarssl ≫ Polarssl Version0.14.3
Polarssl ≫ Polarssl Version0.99 Updatepre1
Polarssl ≫ Polarssl Version0.99 Updatepre3
Polarssl ≫ Polarssl Version0.99 Updatepre4
Polarssl ≫ Polarssl Version0.99 Updatepre5
Polarssl ≫ Polarssl Version1.0.0
Polarssl ≫ Polarssl Version1.1.0
Polarssl ≫ Polarssl Version1.1.0 Updaterc0
Polarssl ≫ Polarssl Version1.1.0 Updaterc1
Polarssl ≫ Polarssl Version1.1.1
Polarssl ≫ Polarssl Version1.1.2
Polarssl ≫ Polarssl Version1.1.3
Polarssl ≫ Polarssl Version1.1.4
Polarssl ≫ Polarssl Version1.1.5
Polarssl ≫ Polarssl Version1.2.0
Polarssl ≫ Polarssl Version1.2.1
Polarssl ≫ Polarssl Version1.2.2
Polarssl ≫ Polarssl Version1.2.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.88% 0.731
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.