Matrixssl vulnerabilities

24 vulnerabilities

Known vulnerabilities in Matrixssl products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
4.7MediumCVE-2018-12439matrixsslmatrixssl matrixsslMatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP. To discover an ECDSA key, the attacker needs access to either the local machine or a different virtual machine on the same physical host.EPSS0.27%7.5HighCVE-2016-6892matrixsslmatrixssl matrixsslThe x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.EPSS1.86%7.5HighCVE-2016-6886matrixsslmatrixssl matrixsslThe pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's modulus for the secret key during RSA key exchange.EPSS1.69%10CriticalCVE-2016-6890matrixsslmatrixssl matrixsslHeap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.EPSS6.38%7.5HighCVE-2016-6885matrixsslmatrixssl matrixsslThe pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base zero value for the modular exponentiation.EPSS1.33%5.9MediumCVE-2016-6883matrixsslmatrixssl matrixsslMatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack.EPSS13.91%7.5HighCVE-2016-6891matrixsslmatrixssl matrixsslMatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.EPSS1.86%6.5MediumCVE-2016-6884matrixsslmatrixssl matrixsslTLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted message.EPSS1.33%5.9MediumCVE-2016-6887matrixsslmatrixssl matrixsslThe pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT attack.EPSS1.15%5.9MediumCVE-2016-6882matrixsslmatrixssl matrixsslMatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack.EPSS1.30%5.9MediumCVE-2016-8671matrixsslmatrixssl matrixsslThe pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6887.EPSS1.34%9.8CriticalCVE-2022-43974matrixsslmatrixssl matrixsslMatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve remote code execution. This is fixed in 4.6.0.EPSS1.80%7.5HighCVE-2022-46505matrixsslmatrixssl matrixsslAn issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data.EPSS0.86%9.8CriticalCVE-2017-2780inside secure · matrixssl +1 moreinside secure matrixsslAn exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection.EPSS2.34%9.8CriticalCVE-2017-2781inside secure · matrixssl +1 moreinside secure matrixsslAn exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection.EPSS2.34%9.1CriticalCVE-2017-2782matrixsslmatrixssl matrixsslAn integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a length counter to overflow, leading to a controlled out of bounds copy operation. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connectionEPSS1.01%5.3MediumCVE-2017-1000417matrixsslmatrixssl matrixsslMatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs (e.g. in ExtKeyUsage extension) on X.509 certificates.EPSS0.65%5.9MediumCVE-2017-1000415matrixsslmatrixssl matrixsslMatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years.EPSS0.48%7.5HighCVE-2019-16747matrixsslmatrixssl matrixsslIn MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a different vulnerability than CVE-2019-14431.EPSS1.80%9.8CriticalCVE-2019-13470matrixsslmatrixssl matrixsslMatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling.EPSS1.62%