Skip to content
OpenAdvisories
Unscored CVE-2015-5291 EUVD-2015-5268GHSA-hhcq-g9mx-qpfg

Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allo…

Published Nov 2, 2015 · Updated Aug 6, 2024 · Assigned by redhat

Description

Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message. NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 8 polarssl 1.3.9-2.1+deb8u1 DSA-3468-1
Debian 7 polarssl 1.2.9-1~deb7u6 DSA-3468-1
Debian 6.0 polarssl 1.2.9-1~deb6u5 DLA-331-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed mbedtls 2.4.0-1.2 openSUSE-SU-2024:10088-1
openSUSE Tumbleweed mbedtls-2 2.28.3-1.1 openSUSE-SU-2024:12903-1
openSUSE Tumbleweed mbedtls-3 3.6.6-1.1 openSUSE-SU-2026:11119-1

Advisories 5

References