CVE-2011-4574 Weak cryptography in PolarSSL
PolarSSL's random number generation relies on a virtualizable timer, leading to predictable keys in virtualized environments.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-4574?
CVE-2011-4574 is a critical vulnerability in PolarSSL, published on 27 Oct 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer (the RDTSC instruction). This instruction can be virtualized, and some virtual machine hosts have chosen to disable this instruction, returning 0s or predictable results.
Weakness: CWE-338
Which versions are affected by CVE-2011-4574?
It affects 1 product.
Products include Polarssl Polarssl.
How do I fix CVE-2011-4574?
No fix has been published for CVE-2011-4574 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-4574 being exploited?
There is no known exploitation of CVE-2011-4574 in the wild and no public exploit code.
Other vulnerabilities in PolarSSL
- CVE-2014-8628 Denial of service in n/a
- CVE-2013-5914 Buffer overflow in the ssl_read_record function in ssl_tls.c in PolarSSL before 1.1.8, when using TLS 1.1, might allow remote attackers to e
- CVE-2014-8627 Security feature bypass in n/a
- CVE-2013-5915 Information disclosure in n/a
- CVE-2013-4623 Denial of service in n/a
Sources
Also known as GHSA-69cr-qg65-xgm7.