CVE-2011-1923: The Diffie-Hellman key-exchange implementation in dhm.c in PolarSSL before 0.14.2 does not properly validat...

Security readout for executives and security teams

This is an old cryptographic implementation flaw in PolarSSL before 0.14.2. A network attacker positioned between two parties could make Diffie-Hellman key exchange weaker by modifying traffic, potentially learning the shared secret. The sources do not show active exploitation or a named affected downstream product list. Exposure is most likely in legacy software, appliances, or embedded builds that include PolarSSL before 0.14.2 and use its Diffie-Hellman key exchange code. The provided data does not name downstream products. Treat this as a legacy cryptography exposure. It is not currently evidenced as exploited, but affected systems could lose confidentiality if an attacker can intercept and modify traffic. Mitigation focus: Inventory software using PolarSSL before 0.14.2.; Upgrade vulnerable PolarSSL components to 0.14.2 or later where applicable.; Check the PolarSSL security advisory for vendor-specific guidance..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.