CVE-2014-8628

VendorpolarsslProductpolarsslDiscoveredAug 24, 2015UpdatedMay 6, 2026

Memory leak in PolarSSL before 1.2.12 and 1.3.x before 1.3.9 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted X.509 certificates. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2014-9744 for the ClientHello message issue.

View graph Watch Export

CVSS v3.1

—

EPSS

1.72%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

Connections

2 relationships

CWE-399

source

Timeline

disclosure → media coverage

Aug 24, 2015

Disclosure — published as a CVE record. · last revised by NVD May 6, 2026