CVE-2015-5291

Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long hostname to the server name indication (SNI) extension, which is not properly handled when creating a ClientHello message. NOTE: this identifier has been SPLIT per ADT3 due to different affected version ranges. See CVE-2015-8036 for the session ticket issue that was introduced in 1.3.0.

• CWE-119

• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170317.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169625.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169765.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00013.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-12/msg00119.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3468Third Party Advisory
• https://guidovranken.files.wordpress.com/2015/10/cve-2015-5291.pdfThird Party Advisory
• https://guidovranken.wordpress.com/2015/10/07/cve-2015-5291/Third Party Advisory
• https://security.gentoo.org/glsa/201706-18Third Party Advisory
• https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2015-01Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-November/170317.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169625.htmlMailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169765.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00013.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-12/msg00119.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3468Third Party Advisory
• https://guidovranken.files.wordpress.com/2015/10/cve-2015-5291.pdfThird Party Advisory
• https://guidovranken.wordpress.com/2015/10/07/cve-2015-5291/Third Party Advisory
• https://security.gentoo.org/glsa/201706-18Third Party Advisory
• https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2015-01Vendor Advisory

Published

Nov 2, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-5285CRLF injection vulnerability in Kallithea before 0.3 allows …
• CVE-2015-5286OpenStack Image Service (Glance) before 2014.2.4 (juno) and …
• CVE-2015-5287The abrt-hook-ccpp help program in Automatic Bug Reporting T…
• CVE-2015-5288The crypt function in contrib/pgcrypto in PostgreSQL before …
• CVE-2015-5289Multiple stack-based buffer overflows in json parsing in Pos…
• CVE-2015-5290A Denial of Service vulnerability exists in ircd-ratbox 3.0.…7.5
• CVE-2015-5292Memory leak in the Privilege Attribute Certificate (PAC) res…
• CVE-2015-5293Red Hat Enterprise Virtualization Manager 3.6 and earlier gi…
• CVE-2015-5294Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-5295The template-validate command in OpenStack Orchestration API…
• CVE-2015-5296Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3…5.4
• CVE-2015-5297An integer overflow issue has been reported in the general_c…6.7