CVE-2011-1923: Medium severity polarssl vulnerability
The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1923?
CVE-2011-1923 has a medium severity, as it allows for potential man-in-the-middle attacks.
How do I fix CVE-2011-1923?
To fix CVE-2011-1923, you should upgrade PolarSSL to version 0.14.2 or later.
What types of attacks can CVE-2011-1923 facilitate?
CVE-2011-1923 can facilitate man-in-the-middle attacks by allowing attackers to intercept and manipulate the Diffie-Hellman key exchange.
Which versions of PolarSSL are affected by CVE-2011-1923?
CVE-2011-1923 affects PolarSSL versions from 0.10.0 up to 0.14.0, excluding 0.14.2 and later.
What is the main cause of CVE-2011-1923?
The main cause of CVE-2011-1923 is the improper validation of public parameters in the Diffie-Hellman key-exchange implementation.