https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:48:23.635532+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-07241 cnvd-2015-07241 2026-10-02T19:48:23.641553+00:00 cnvd-2015-07241 https://cve.radiocsirt.org/vuln/euvd-2026-93368 EUVD-2026-93368 2026-10-02T19:48:23.641587+00:00 EUVD-2026-93368 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5291 fkie_cve-2015-5291 2026-10-02T19:48:23.641601+00:00

Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message. NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.

 https://cve.radiocsirt.org/vuln/ghsa-hhcq-g9mx-qpfg GHSA-hhcq-g9mx-qpfg 2026-10-02T19:48:23.641632+00:00

Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message. NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.

 https://cve.radiocsirt.org/vuln/gsd-2015-5291 gsd-2015-5291 2026-10-02T19:48:23.641650+00:00 gsd-2015-5291 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10088-1 openSUSE-SU-2024:10088-1 — libmbedcrypto0-2.4.0-1.2 on GA media 2026-10-02T19:48:23.641661+00:00

libmbedcrypto0-2.4.0-1.2 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-5291 Withdrawn: UBUNTU-CVE-2015-5291 2026-10-02T19:48:23.641679+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: mbedtls

Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message. NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.