medium5.0
CVE-2014-8627
PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors.
Impact
PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to conduct downgrade attacks via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Polarssl | Polarssl | Version 1.3.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00079.html
- http://secunia.com/advisories/61220
- https://polarssl.org/tech-updates/releases/polarssl-1.3.9-released
- http://lists.opensuse.org/opensuse-updates/2014-11/msg00079.html
- http://secunia.com/advisories/61220
- https://polarssl.org/tech-updates/releases/polarssl-1.3.9-released