CVE-2011-4574

PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer (the RDTSC instruction). This instruction can be virtualized, and some virtual machine hosts have chosen to disable this instruction, returning 0s or predictable results.

CVSS v3 9.8 CRITICAL
CVSS v2.0 7.5 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://tls.mbed.org/tech-updates/security-advisories/polarssl-security-advisory-2011-02	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:polarssl:polarssl:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-10-27 01:15

Updated : 2024-02-28 18:48

NVD link : CVE-2011-4574

Mitre link : CVE-2011-4574

CVE.ORG link : CVE-2011-4574

JSON object : View

Products Affected

polarssl

polarssl

CWE

CWE-338

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

{"id": "CVE-2011-4574", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2021-10-27T01:15:07.067", "references": [{"url": "https://tls.mbed.org/tech-updates/security-advisories/polarssl-security-advisory-2011-02", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-338"}]}], "descriptions": [{"lang": "en", "value": "PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer (the RDTSC instruction). This instruction can be virtualized, and some virtual machine hosts have chosen to disable this instruction, returning 0s or predictable results."}, {"lang": "es", "value": "PolarSSL versiones anteriores a v1.1, usan el algoritmo de generaci\u00f3n de n\u00fameros aleatorios HAVEGE. En su esencia, \u00e9ste usa informaci\u00f3n de tiempo basada en el temporizador de alta resoluci\u00f3n del procesador (la instrucci\u00f3n RDTSC). Esta instrucci\u00f3n puede ser virtualizada, y algunos hosts de m\u00e1quinas virtuales han optado por deshabilitar esta instrucci\u00f3n, devolviendo 0s o resultados predecibles"}], "lastModified": "2021-10-28T17:55:50.970", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:polarssl:polarssl:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CDD46886-D113-42AE-A06E-B2563A046094", "versionEndExcluding": "1.1.0"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}