CVE-2013-1621 | BDVDB-2026-54505 Detail

Description#

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.isg.rhul.ac.uk/tls/TLStiming.pdf
http://www.debian.org/security/2013/dsa-2622
http://openwall.com/lists/oss-security/2013/02/05/24
https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released

Exploit#

No public exploit known

History#

Version 12013-02-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.