CVE-2015-5291
Medium
Description
Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message. NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.
SeverityMedium
CVSS6.8
Exploit probability—
Product
Polarssl
PublishedNov 2, 2015
First seenNov 2, 2015
How to fix
Update
- polarssl polarssl1.2.17 or later
- trustedfirmware mbed_tls1.3.14, 2.1.2 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| polarssl polarssl | 1.0.0 ≤ v < 1.2.17 | 1.2.17 |
| trustedfirmware mbed_tls | 1.3.0 ≤ v < 1.3.14, 2.0.0 ≤ v < 2.1.2 | 1.3.14, 2.1.2 |
| debian debian_linux | 7.0, 8.0 | — |
| fedoraproject fedora | 21, 22, 23 | — |
| opensuse leap | 42.1 | — |
| opensuse opensuse | 13.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.