GCVE-110-MAGEIA-2014-481 — Vulnetix

GCVE-110-MAGEIA-2014-481

Advisory Published

Vulnetix · Advisory published November 22, 2014

A regression in PolarSSL 1.3.8 resulted in servers negotiating a weaker signature algorithm than available. This has been fixed in PolarSSL 1.3.9 (CVE-2014-8627). Two remotely-triggerable memory leaks were found by the Codenomicon Defensics tool and fixed in PolarSSL 1.3.9 (CVE-2014-8628).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	polarssl	0 (affected), 1.3.9-1.mga4 (unaffected)	—
Mageia	polarssl	0 (affected), 1.3.9-1.mga3 (unaffected)	—

Aliases

CVE-2014-8627 CVE-2014-8628

References

Updated polarssl package fix security vulnerabilities

advisory

Updated polarssl package fix security vulnerabilities

issue

Updated polarssl package fix security vulnerabilities

issue

Updated polarssl package fix security vulnerabilities

issue

Browse GCVE Records

73,685 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON

$ Console Community · 100/wk Open console ›