Vulnerability Bulletins |
DSA-2981 polarssl - security update |
|
| Affected software | Debian |
|
A flaw was discovered in PolarSSL, a lightweight crypto and SSL/TLSlibrary, which can be exploited by a remote unauthenticated attacker tomount a denial of service against PolarSSL servers that offer GCMciphersuites. Potentially clients are affected too if a malicious serverdecides to execute the denial of service attack against its clients. More info: https://www.debian.org/security/2014/dsa-2981 |
|