[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fk3eEd0LezN2kMelWOwhXnDvfu0BzksG1ETzK4QEPw20":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":80,"topProductsByCves":81,"seoMetadata":83,"meta":92},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":18},25195,"polarssl",1,15,0,51,"2021-10-27","p",[16],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},129850,"Polarssl is a technology vendor with 1 tracked product and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[20,29,36,43,48,52,58,65,71,76],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2013-0169","The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on a MAC check requirement during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, aka the \"Lucky Thirteen\" issue.","2013-02-08",2.6,"v2","Low",false,0.35584,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":35},"CVE-2015-5291","Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message.  NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.","2015-11-02",6.8,"Medium",0.03659,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":25,"severity":41,"isKev":27,"epssScore":42},"CVE-2015-1182","The asn1_get_sequence_of function in library\u002Fasn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.9 does not properly initialize a pointer in the asn1_sequence linked list, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ASN.1 sequence in a certificate.","2015-01-27",7.5,"High",0.03099,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":47},"CVE-2013-5914","Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.","2013-10-26",0.02997,{"cveId":49,"description":50,"publishedDate":32,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":51},"CVE-2015-8036","Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, which is not properly handled when creating a ClientHello message to resume a session.  NOTE: this identifier was SPLIT from CVE-2015-5291 per ADT3 due to different affected version ranges.",0.0289,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":57},"CVE-2014-4911","The ssl_decrypt_buf function in library\u002Fssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit.","2014-07-22",5,0.02427,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":63,"severity":41,"isKev":27,"epssScore":64},"CVE-2012-2130","A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when generating Diffie-Hellman values and RSA keys.","2019-12-06",7.4,"v3.1",0.02202,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":69,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":70},"CVE-2013-5915","The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might allow remote attackers to conduct a timing side-channel attack and retrieve RSA private keys.","2013-10-04",4.3,0.02143,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":56,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":75},"CVE-2014-8627","PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors.","2014-11-24",0.0209,{"cveId":77,"description":78,"publishedDate":23,"cvssScore":69,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":79},"CVE-2013-1621","Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.",0.02068,[],[82],{"id":17,"product_name":8,"version_count":12,"cve_count":10,"kev_count":11,"last_cve_update":13},{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Polarssl - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Polarssl covering 1 product with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Polarssl vulnerabilities, Polarssl security, Polarssl CVE, Polarssl threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":88,"@type":89,"name":90,"description":85,"url":91},"https:\u002F\u002Fschema.org","Organization","Polarssl","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fpolarssl",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":93,"apiVersion":94},"2026-10-17T20:21:30.203Z","3.0"]