VulnerabilityModified

CVE-2011-4574

PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm.

CRITICAL 9.8EPSS 1.09%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.09%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

PolarSSL versions prior to v1.1 use the HAVEGE random number generation algorithm. At its heart, this uses timing information based on the processor's high resolution timer (the RDTSC instruction). This instruction can be virtualized, and some virtual machine hosts have chosen to disable this instruction, returning 0s or predictable results.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 1.09% probability · 63th percentile
CISA KEV: Not listed
Weakness: CWE-338
Affected: polarssl/polarssl
Source: secalert@redhat.com

References

https://tls.mbed.org/tech-updates/security-advisories/polarssl-security-advisory-2011-02Third Party Advisory
https://tls.mbed.org/tech-updates/security-advisories/polarssl-security-advisory-2011-02Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.