CVE-2015-1182: High severity suse linux vulnerability
The asn1getsequenceof function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1sequence linked list, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ASN.1 sequence in a certificate.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1182?
CVE-2015-1182 has been classified as a vulnerability that can lead to denial of service or arbitrary code execution.
How do I fix CVE-2015-1182?
To fix CVE-2015-1182, you should update PolarSSL to a version later than 1.3.9 or apply the appropriate patches provided by your distribution.
Which versions of PolarSSL are affected by CVE-2015-1182?
CVE-2015-1182 affects PolarSSL versions from 1.0 to 1.3.9.
Can CVE-2015-1182 be exploited remotely?
Yes, CVE-2015-1182 can be exploited by remote attackers to cause denial of service or potentially execute arbitrary code.
What component of PolarSSL does CVE-2015-1182 impact?
CVE-2015-1182 impacts the asn1_get_sequence_of function in the library/asn1parse.c file.