CVE-2011-4574

CVE-2011-4574 describes a critical vulnerability in PolarSSL versions prior to 1.1, where the HAVEGE random number generator relies on the RDTSC instruction. This instruction, when virtualized and disabled or predictably implemented by some virtual machine hosts, can lead to weak or predictable random numbers. With a CVSS score of 9.8 (CRITICAL), this vulnerability allows for remote attacks with low complexity, potentially leading to full compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.