Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 1 articles for you...
197
security advisorymoderateupdateDebian 8 DLA-1518-1 Moderate Polarssl Side-Channel Threats
Two vulnerabilities were discovered in polarssl, a lightweight crypto and SSL/TLS library (nowadays continued under the name mbedtls) which could result in plain text recovery via side-channel attacks. . Package : polarssl Version : 1.3.9-2.1+deb8u4 CVE ID : CVE-2013-0169 CVE-2018-0497 CVE-2018-0498 CVE-2018-9988 CVE-2018-9989 Debian Bug : Two vulnerabilities were discovered in polarssl, a lightweight crypto and SSL/TLS library (nowadays continued under the name mbedtls) which could result in plain text recovery via side-channel attacks. Two other minor vulnerabilities were discovered in polarssl which could result in arithmetic overflow errors. CVE-2018-0497 As a protection against the Lucky Thirteen attack, the TLS code for CBC decryption in encrypt-then-MAC mode performs extra MAC calculations to compensate for variations in message size due to padding. The amount of extra MAC calculation to perform was based on the assumption that the bulk of the time is spent in processing 64-byte blocks, which is correct for most supported hashes but not for SHA-384. Correct the amount of extra work for SHA-384 (and SHA-512 which is currently not used in TLS, and MD2 although no one should care about that). This is a regression fix for what CVE-2013-0169 had been fixed this. CVE-2018-0498 The basis for the Lucky 13 family of attacks is for an attacker to be able to distinguish between (long) valid TLS-CBC padding and invalid TLS-CBC padding. Since our code sets padlen = 0 for invalid padding, the length of the input to the HMAC function gives information about that. Information about this length (modulo the MD/SHA block size) can be deduced from how much MD/SHA padding (this is distinct from TLS-CBC padding) is used. If MD/SHA padding is read from a (static) buffer, a local attacker could get information about how much is used via a cache attacktargeting that buffer. Let's get rid of this buffer. Now the only buffer used is the internal MD/SHA one, which is always read fully by the process() function. CVE-2018-9988 Prevent arithmetic overflow on bounds check and add bound check before signature length read in ssl_parse_server_key_exchange(). CVE-2018-9989 Prevent arithmetic overflow on bounds check and add bound check before length read in ssl_parse_server_psk_hint() For Debian 8 "Jessie", these problems have been fixed in version 1.3.9-2.1+deb8u4. We recommend that you upgrade your polarssl packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -- mike gabriel aka sunweaver (Debian Developer) fon: +49 (1520) 1976 148 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail:
Sep 25, 2018
Debian LTS
87
security advisorydenial of serviceremote code executionDebian 9: DSA-4147-1 Moderate: PolarSSL Remote Code Execution
Several vulnerabilities were discovered in PolarSSL, a lightweight crypto and SSL/TLS library, that allowed a remote attacker to either cause a denial-of-service by application crash, or execute arbitrary code. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-4147-1
Mar 21, 2018
Debian
87
security advisorydenial of servicebuffer overflowDebian: DSA-3469-1 Critical: Polarssl Buffer Overflow DoS Threat
It was discovered that polarssl, a library providing SSL and TLS support, contained two heap-based buffer overflows that could allow a remote attacker to trigger denial of service (via application crash) or arbitrary code execution. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3468-1
Feb 06, 2016
•Critical
Debian
87
security advisorydenial of servicecriticalDebian: DSA-3136-1 Critical: PolarSSL Remote Code Execution Risk
A vulnerability was discovered in PolarSSL, a lightweight crypto and SSL/TLS library. A remote attacker could exploit this flaw using specially crafted certificates to mount a denial of service against an application linked against the library (application crash), or . - ------------------------------------------------------------------------- Debian Security Advisory DSA-3136-1
Jan 24, 2015
•Critical
Debian
198
security advisorycritical issueremote code executionArch Linux: ASA-201501-13 Critical Polarssl Remote Code Execution
The package polarssl before version 1.3.9-2 is vulnerable to remote code execution. . Arch Linux Security Advisory ASA-201501-13 ========================================= Severity: Critical Date : 2015-01-20 CVE-ID : CVE-2015-1182 Package : polarssl Type : remote code execution Remote : Yes Link : https://wiki.archlinux.org/title/CVE Summary ====== The package polarssl before version 1.3.9-2 is vulnerable to remote code execution. Resolution ========= Upgrade to 1.3.9-2. # pacman -Syu "polarssl> =1.3.9-2" The problem has not been fixed upstream yet. Workaround ========= None. Description ========== During the parsing of a ASN.1 sequence, a pointer in the linked list of asn1_sequence is not initialized by asn1_get_sequence_of(). In case an error occurs during parsing of the list, a situation is created where the uninitialized pointer is passed to polarssl_free(). This sequence can be triggered when a PolarSSL entity is parsing a certificate. So practically this means clients when receiving a certificate from the server or servers in case they are actively asking for a client certificate. Impact ===== An attacker may be able to remotely execute arbitrary code on the targeted system. References ========= https://bugs.archlinux.org/task/43508 . Arch Linux Security Notice ASA-201601-42 Severity: High Date: 2016-02-15 CVE-ID: CVE-2016-1234. Arch Linux Advisory, Polarssl Issue, Critical Code Execution. . Severity: Critical. LinuxSecurity.com Team
Jan 20, 2015
•Critical
ArchLinux
87
security advisorymoderatedenial of serviceDebian: DSA-3116-1 Moderate: Polarssl Memory Leak DoS Issue
It was discovered that a memory leak in parsing X.509 certificates may result in denial of service. For the stable distribution (wheezy), this problem has been fixed in . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3116-1
Dec 30, 2014
Debian
198
security advisorymedium severitymemory leakArch Linux: ASA-201411-4 Medium Severity: Polarssl Memory Leaks
The package polarssl before version 1.3.9-1 is vulnerable to multiple issues including weak signature negotiation and remotely triggerable memory leaks. . Arch Linux Security Advisory ASA-201411-4 ======================================== Severity: Medium Date : 2014-11-06 CVE-ID : CVE-2014-8627, CVE-2014-8628 Package : polarssl Type : multiple issues Remote : Yes Link : https://wiki.archlinux.org/title/CVE-2014 Summary ====== The package polarssl before version 1.3.9-1 is vulnerable to multiple issues including weak signature negotiation and remotely triggerable memory leaks. Resolution ========= Upgrade to 1.3.9-1. # pacman -Syu "polarssl> =1.3.9-1" The problem has been fixed upstream in version 1.3.9. Workaround ========= None. Description ========== - CVE-2014-8627 (weak signature negotiation) A mistake resulted in servers negotiating the lowest common hash from signature_algorithms extension in TLS 1.2. - CVE-2014-8628 (memory leaks) Two issues were found that result in remotely triggerable memory leaks when parsing crafted ClientHello messages or X.509 certificates. Impact ===== A remote attacker is able to trigger memory leaks which may result in memory exhaustion and therefore denial of service. Additionally due to weak negotiated signature algorithms an attacker may be able to perform cryptographic attacks. References ========= https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8627 https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8628 https://www.openwall.com/lists/oss-security/2014/11/04/6 https://github.com/Mbed-TLS/mbedtls/commit/43c3b28 . Arch Linux advisory addressing polarssl vulnerabilities classified with medium severity; issues noted encompass memory leak occurrences and signature integrity problems.. polarssl Security Update, Archlinux Advisory, Memory Leak Issues. . Severity: Medium. LinuxSecurity.com Team
Nov 06, 2014
•Medium
ArchLinux
87
security advisorydenial of servicecriticalDebian DSA-2981-1: PolarSSL Critical Denial of Service Threat
A flaw was discovered in PolarSSL, a lightweight crypto and SSL/TLS library, which can be exploited by a remote unauthenticated attacker to mount a denial of service against PolarSSL servers that offer GCM ciphersuites. Potentially clients are affected too if a malicious server . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2981-1
Jul 18, 2014
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!