Memory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of ClientHello messages. NOTE: this identifier was SPLIT from CVE-2014-8628 per ADT3 due to different affected versions.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Opensuse | Opensuse | 13.2 (including) | 13.2 (including) |
| Mbedtls | Ubuntu | upstream | * |
| Polarssl | Ubuntu | precise | * |
| Polarssl | Ubuntu | trusty | * |
| Polarssl | Ubuntu | upstream | * |