The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit.

Denial of Service against GCM enabled servers (and clients).

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Update to 1.2.11

    - CVE-2014-4911 (rhbz#1118929, rhbz#1118930)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A flaw was discovered in PolarSSL, a lightweight crypto and SSL/TLS library, which can be exploited by a remote unauthenticated attacker to mount a denial of service against PolarSSL servers that offer GCM ciphersuites. Potentially clients are affected too if a malicious server decides to execute the denial of service attack against its clients.

ID	Name	Product	Family	Severity
82184	Debian DLA-36-1 : polarssl security update	Nessus	Debian Local Security Checks	medium
76629	Fedora 20 : polarssl-1.2.11-1.fc20 (2014-8316)	Nessus	Fedora Local Security Checks	medium
76628	Fedora 19 : polarssl-1.2.11-1.fc19 (2014-8310)	Nessus	Fedora Local Security Checks	medium
76599	Debian DSA-2981-1 : polarssl - security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2014-4911

high

Tenable Plugins

medium

medium

medium

medium