CVE-2015-5291: Buffer Overflow
Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message. NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5291?
CVE-2015-5291 has a severity that can lead to denial of service and potentially arbitrary code execution.
How do I fix CVE-2015-5291?
To fix CVE-2015-5291, upgrade PolarSSL to version 1.2.17 or later, or upgrade mbed TLS to versions 1.3.14, 2.1.2 or later.
What software is affected by CVE-2015-5291?
CVE-2015-5291 affects PolarSSL 1.x before 1.2.17 and mbed TLS versions 1.3.x before 1.3.14 and 2.x before 2.1.2.
Can CVE-2015-5291 be exploited remotely?
Yes, CVE-2015-5291 can be exploited remotely via a long hostname to the Server Name Indication (SNI) extension.
What type of vulnerability is CVE-2015-5291?
CVE-2015-5291 is classified as a heap-based buffer overflow vulnerability.