CVE-2013-1621 - Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169

Back Back to CVE browser

MEDIUM

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169

Published Feb 8, 2013

4.3

MEDIUM

CVSS 2.0

EPSS 2.07%

Description

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (5)

http://openwall.com/lists/oss-security/2013/02/05/24
mailing-listx_refsource_MLIST
http://www.debian.org/security/2013/dsa-2622
vendor-advisoryx_refsource_DEBIAN
http://www.isg.rhul.ac.uk/tls/TLStiming.pdf
x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1656
Advisory
https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://openwall.com/lists/oss-security/2013/02/05/24		mailing-listx_refsource_MLIST
http://www.debian.org/security/2013/dsa-2622		vendor-advisoryx_refsource_DEBIAN
http://www.isg.rhul.ac.uk/tls/TLStiming.pdf		x_refsource_MISC
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1656		Advisory
https://polarssl.org/tech-updates/releases/polarssl-1.2.5-released		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 8, 2013

Updated Aug 6, 2024

Reserved Feb 5, 2013

Link CVE-2013-1621

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-1621

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 8, 2013

Updated Aug 6, 2024

Link EUVD-2013-1656

GitHub

No data