NVD

Id
40198  
Name
CVE-2013-4623  
Description
The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages during the SSL/TLS handshake, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certificate message that contains a PEM encoded certificate.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2013-09-30  
Modified Date
2013-10-30  
Seq
2013-4623  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204552 40198 CVE-2013-4623 FEDORA-2013-16317  View
204553 40198 CVE-2013-4623 FEDORA-2013-16356  View
204554 40198 CVE-2013-4623 FEDORA-2013-16258  View
204555 40198 CVE-2013-4623 DSA-2782  View
204556 40198 CVE-2013-4623 61764  View
204557 40198 CVE-2013-4623 https://bugzilla.redhat.com/show_bug.cgi?id=997767  View
204558 40198 CVE-2013-4623 https://github.com/polarssl/polarssl/commit/1922a4e6aade7b1d685af19d4d9339ddb5c02859  View
204559 40198 CVE-2013-4623 https://polarssl.org/tech-updates/security-advisories/polarssl-security-advisory-2013-03  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22840 JVNDB-2013-004415 PolarSSL の x509.h の x509parse_crt 関数におけるサービス運用妨害 (DoS) の脆弱性 PolarSSL の x509.h の x509parse_crt 関数は、SSL/TLS ハンドシェイクの間、証明書のメッセージを適切に解析しないため、サービス運用妨害 (無限ループおよび CPU 資源の消費) 状態にされる脆弱性が存在します。 CVE-2013-4623 64565 CVE-2013-4623 40198 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004415.html 2013-06-21 2013-11-14 View