CVE-2014-8627 | BDVDB-2026-66366 Detail

Description#

PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lists.opensuse.org/opensuse-updates/2014-11/msg00079.html
https://polarssl.org/tech-updates/releases/polarssl-1.3.9-released
http://secunia.com/advisories/61220

Exploit#

No public exploit known

History#

Version 12014-11-24Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.