Back to search
CVE-2015-8036
Published: Nov 2, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, which is not properly handled when creating a ClientHello message to resume a session. NOTE: this identifier was SPLIT from CVE-2015-5291 per ADT3 due to different affected version ranges.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-3468
vendor-advisory
x_refsource_DEBIAN
https://guidovranken.wordpress.com/2015/10/07/cve-2015-5291/
x_refsource_MISC
FEDORA-2015-30a417bea9
vendor-advisory
x_refsource_FEDORA
openSUSE-SU-2016:1928
vendor-advisory
x_refsource_SUSE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now