CVE-2014-4911: The ssl_decrypt_buf function in library/ssl_tls.c in PolarSSL before 1.2.11 and 1.3.x before 1.3.8 allows r...

Security readout for executives and security teams

CVE-2014-4911 is a remote denial-of-service issue in PolarSSL. A remote attacker could crash software using affected PolarSSL versions when GCM TLS cipher suites are involved. The source bundle does not show code execution, data theft, CVSS scoring, or active exploitation. Exposure is likely where applications, appliances, or operating-system packages include PolarSSL before 1.2.11 or 1.3.x before 1.3.8 and negotiate affected GCM TLS cipher suites. Products with bundled or statically linked PolarSSL need separate inventory review. Treat as a reliability and availability risk. Prioritize internet-facing or business-critical TLS services using affected PolarSSL builds, especially where outages would disrupt customer access or operational workflows. Mitigation focus: Upgrade PolarSSL to 1.2.11, 1.3.8, or a later fixed release.; Apply vendor package updates, including Debian guidance where relevant.; Inventory bundled or statically linked PolarSSL copies in applications and appliances..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.