CVE-2013-1621: Polarssl

Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days.

Array index error in the SSL module in PolarSSL before 1.2.5 might allow remote attackers to cause a denial of service via vectors involving a crafted padding-length value during validation of CBC padding in a TLS session, a different vulnerability than CVE-2013-0169.

Affected products

• Polarssl Polarssl: up to and including 1.2.4; version 0.10.0 only; version 0.10.1 only; version 0.11.0 only; version 0.11.1 only; version 0.12.0 only; …

Published 2013-02-08. Last modified 2026-06-16.