CVE:CVE-2015-8036
CNNVD:CNNVD-201511-007
ARM mbed TLS（前称PolarSSL）是英国ARM公司的一款为mbed产品提供安全通讯和加密功能的产品。
ARM mbed TLS 1.3.14之前1.3.x版本和2.1.2之前2.x版本中存在基于堆的缓冲区溢出漏洞，该漏洞源于程序创建ClientHello消息时没有对session ticket扩展的session ticket名称执行正确的边界检查。远程攻击者可利用该漏洞造成拒绝服务（客户端崩溃），并执行任意代码。
solution:Upgrade arm mbed_tls to a higher version than 1.3.14,2.1.2,and avoid the version [1.3.0,1.3.14),[2.0.0,2.1.2); Upgrade polarssl polarssl to a higher version than 1.2.17,and avoid the version (,1.2.17]; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade fedoraproject fedora to a higher version than 21,and avoid the version 21; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2