CVE-2015-8036

Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, which is not properly handled when creating a ClientHello message to resume a session. NOTE: this identifier was SPLIT from CVE-2015-5291 per ADT3 due to different affected version ranges.

• CWE-119

• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169625.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-08/msg00009.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3468Mailing List, Third Party Advisory
• https://guidovranken.files.wordpress.com/2015/10/cve-2015-5291.pdfThird Party Advisory
• https://guidovranken.wordpress.com/2015/10/07/cve-2015-5291/Third Party Advisory
• https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2015-01Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169625.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2016-08/msg00009.htmlMailing List, Third Party Advisory
• http://www.debian.org/security/2016/dsa-3468Mailing List, Third Party Advisory
• https://guidovranken.files.wordpress.com/2015/10/cve-2015-5291.pdfThird Party Advisory
• https://guidovranken.wordpress.com/2015/10/07/cve-2015-5291/Third Party Advisory
• https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advisory-2015-01Vendor Advisory

Published

Nov 2, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-8030SAP 3D Visual Enterprise Viewer (VEV) allows remote attacker…
• CVE-2015-8031Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 …9.8
• CVE-2015-8032In Textpattern 4.5.7, an unprivileged author can change an a…5.3
• CVE-2015-8033In Textpattern 4.5.7, the password-reset feature does not se…5.3
• CVE-2015-8034The state.sls function in Salt before 2015.8.3 uses weak per…
• CVE-2015-8035The xz_decomp function in xzlib.c in libxml2 2.9.1 does not …
• CVE-2015-8037Multiple cross-site scripting (XSS) vulnerabilities in the G…
• CVE-2015-8038Multiple cross-site scripting (XSS) vulnerabilities in the G…
• CVE-2015-8039Samsung SmartViewer allows remote attackers to execute arbit…
• CVE-2015-8040The rtsp_getdlsendtime method in the CNC_Ctrl control in Sam…
• CVE-2015-8041Multiple integer overflows in the NDEF record parser in host…
• CVE-2015-8042Use-after-free vulnerability in Adobe Flash Player before 18…