Miembros de
Boletines de Vulnerabilidades |
DSA-2981 polarssl - security update |
|
Información sobre el sistema |
|
| Software afectado | Debian |
Descripción |
|
|
A flaw was discovered in PolarSSL, a lightweight crypto and SSL/TLSlibrary, which can be exploited by a remote unauthenticated attacker tomount a denial of service against PolarSSL servers that offer GCMciphersuites. Potentially clients are affected too if a malicious serverdecides to execute the denial of service attack against its clients. More info: https://www.debian.org/security/2014/dsa-2981 |
|
Identificadores estándar |
|
| Propiedad | Valor |
| CVE | CVE-2014-4911 and DSA-2981. |
Histórico de versiones |
||
| Versión | Comentario | Fecha |
| 1.0 | Advisory issued | 2014-07-31 |