CVE Feed

    Dashboard / CVE / CVE-2013-5914

    CVE-2013-5914

    Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to execute arbitrary code via a long packet.

    Published:Oct 26, 2013
    Last Modified:Apr 11, 2025
    EPS:Oct 26, 2013
    EPSS Score:0.02853
    CVSS Score:6.8

    Affected Products

    Vendor
    Polarssl
    Product
    Polarssl

    Exploits

    No exploit reference

    Related CVEs

    CVE-2011-4574 (CVSS 9.8) — PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses tim…
    CVE-2012-2130 (CVSS 7.4) — A Security Bypass vulnerability exists in PolarSSL 0.99pre4 through 1.1.1 due to a weak encryption error when …
    CVE-2015-5291 (CVSS 6.8) — Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3…
    CVE-2015-8036 (CVSS 6.8) — Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows…
    CVE-2014-9744 (CVSS 7.8) — Memory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory consumption)…
    CVE-2014-8628 (CVSS 7.8) — Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of serv…
    CVE-2015-1182 (CVSS 7.5) — The asn1_get_sequence_of function in library/asn1parse.c in PolarSSL 1.0 through 1.2.12 and 1.3.x through 1.3.…
    CVE-2014-8627 (CVSS 5) — PolarSSL 1.3.8 does not properly negotiate the signature algorithm to use, which allows remote attackers to co…
    CVE-2014-4911 (CVSS 5) — The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows remo…
    CVE-2013-5915 (CVSS 4.3) — The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High