CVE-2013-1621: Input Validation
First published: Fri Feb 08 2013(Updated: )
Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Polarssl Polarssl | <=1.2.4 | |
| Polarssl Polarssl | =0.10.0 | |
| Polarssl Polarssl | =0.10.1 | |
| Polarssl Polarssl | =0.11.0 | |
| Polarssl Polarssl | =0.11.1 | |
| Polarssl Polarssl | =0.12.0 | |
| Polarssl Polarssl | =0.12.1 | |
| Polarssl Polarssl | =0.13.1 | |
| Polarssl Polarssl | =0.14.0 | |
| Polarssl Polarssl | =0.14.2 | |
| Polarssl Polarssl | =0.14.3 | |
| Polarssl Polarssl | =0.99-pre1 | |
| Polarssl Polarssl | =0.99-pre3 | |
| Polarssl Polarssl | =0.99-pre4 | |
| Polarssl Polarssl | =0.99-pre5 | |
| Polarssl Polarssl | =1.0.0 | |
| Polarssl Polarssl | =1.1.0 | |
| Polarssl Polarssl | =1.1.0-rc0 | |
| Polarssl Polarssl | =1.1.0-rc1 | |
| Polarssl Polarssl | =1.1.1 | |
| Polarssl Polarssl | =1.1.2 | |
| Polarssl Polarssl | =1.1.3 | |
| Polarssl Polarssl | =1.1.4 | |
| Polarssl Polarssl | =1.1.5 | |
| Polarssl Polarssl | =1.2.0 | |
| Polarssl Polarssl | =1.2.1 | |
| Polarssl Polarssl | =1.2.2 | |
| Polarssl Polarssl | =1.2.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- vendor/polarssl
- canonical/polarssl polarssl
- version/polarssl polarssl/1.2.4
- version/polarssl polarssl/0.10.0
- version/polarssl polarssl/0.10.1
- version/polarssl polarssl/0.11.0
- version/polarssl polarssl/0.11.1
- version/polarssl polarssl/0.12.0
- version/polarssl polarssl/0.12.1
- version/polarssl polarssl/0.13.1
- version/polarssl polarssl/0.14.0
- version/polarssl polarssl/0.14.2
- version/polarssl polarssl/0.14.3
- version/polarssl polarssl/0.99-pre1
- version/polarssl polarssl/0.99-pre3
- version/polarssl polarssl/0.99-pre4
- version/polarssl polarssl/0.99-pre5
- version/polarssl polarssl/1.0.0
- version/polarssl polarssl/1.1.0
- version/polarssl polarssl/1.1.0-rc0
- version/polarssl polarssl/1.1.0-rc1
- version/polarssl polarssl/1.1.1
- version/polarssl polarssl/1.1.2
- version/polarssl polarssl/1.1.3
- version/polarssl polarssl/1.1.4
- version/polarssl polarssl/1.1.5
- version/polarssl polarssl/1.2.0
- version/polarssl polarssl/1.2.1
- version/polarssl polarssl/1.2.2
- version/polarssl polarssl/1.2.3