NetSight
medium6.8

CVE-2013-5914

Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary co…

Impact

Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.

Affected products

VendorProductAffected versions
PolarsslPolarssl
through 1.1.7
Versions 1.0.0, 1.1.0, 1.1.1, 1.1.2, 1.1.3

Weakness classification

References