VULNERABILITY INTELLIGENCE

CVE-2014-4911

CVSS score5 MEDIUM
EPSS probability2.43%
CISA KEVNot currently listed
Published2014-07-22
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remote attackers to cause a denial of service (crash) via vectors related to the GCM ciphersuites, as demonstrated using the Codenomicon Defensics toolkit.

Primary references