CVE:CVE-2012-2130
CNNVD:CNNVD-201205-340
PolarSSL 0.99pre4版本至1.1.1版本中存在安全漏洞。远程攻击者可利用该漏洞绕过安全限制，使用中间人技术强制生成Diffie Hellman主密钥并泄露通信通道。
solution:Upgrade polarssl polarssl to a higher version than 1.1.1,0.99:pre4,0.99:pre5,and avoid the version [1.0.0,1.1.1],0.99:pre4,0.99:pre5; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 17,and avoid the version 17