CVE-2013-4623: Polarssl

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

The x509parse_crt function in x509.h in PolarSSL 1.1.x before 1.1.7 and 1.2.x before 1.2.8 does not properly parse certificate messages during the SSL/TLS handshake, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certificate message that contains a PEM encoded certificate.

Affected products

• Polarssl Polarssl: version 1.1.0 only; version 1.1.1 only; version 1.1.2 only; version 1.1.3 only; version 1.1.4 only; version 1.1.5 only; …

Published 2013-09-30. Last modified 2026-06-16.