Buffer overflow in Polarssl

CVE-2013-5914

Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.

Vulnerability class: Buffer Overflow

EPSS: 0.030 (86.0th percentile) — read the EPSS interpretation.

Affected products

  • Polarssl — versions 1.0.0, 1.1.0, 1.1.1
  • N/a — versions n/a

Weakness classification (CWE)

References