Memory Leak in PolarSSL before 1.3.9: Denial of Service via ClientHello Messages

CVE-2014-9744 · HIGH Severity

AV:N/AC:L/AU:N/C:N/I:N/A:C

Memory leak in PolarSSL before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of ClientHello messages. NOTE: this identifier was SPLIT from CVE-2014-8628 per ADT3 due to different affected versions.

Learn more about our Web Application Penetration Testing UK.