Unscored DSA-2782-1 3 CVEs

polarssl - several

Published Oct 20, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 6.0	polarssl	1.2.9-1~deb6u1
Debian · 7	polarssl	1.2.9-1~deb7u1

Vulnerabilities 3

Unscored —

CVE-2013-4623

The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse cert…

Sep 30, 2013
Unscored —

CVE-2013-5914

Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow …

Oct 26, 2013
Unscored —

CVE-2013-5915

The RSA-CRT implementation in PolarSSL before 1.2.9 does not properly perform Montgomery multiplication, which might al…

Oct 4, 2013