Vulnetix
Try Vulnetix Request Demo
CVE-2011-1923 PUBLISHED CVSS 4 MEDIUM

The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validate a public parameter, which makes it easier for man-in-the-middle attackers to obtain the shared secret key by modifying network traffic, a related issue to CVE-2011-5095.

EPSS 0.36% · 57.8th percentile

Risk Scores

CVSS v2.0
4
EPSS Score
0.36%
57.8th percentile

Affected Products

VendorProductVersions
n/an/an/a
polarsslpolarssl0, 0.10.0, 0.10.1

Timeline

References

Open in Interactive Console →