Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
matrixssl matrixssl vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2017-1000415
MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years.
Matrixssl Matrixssl 3.7.2
7.5
CVSSv2
CVE-2017-2780
An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability,...
Matrixssl Matrixssl 3.8.7b
7.5
CVSSv2
CVE-2017-2781
An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability,...
Matrixssl Matrixssl 3.8.7b
6.4
CVSSv2
CVE-2017-2782
An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a length counter to overflow, leading to a controlled out of bounds copy operation. To trigger this vulnerabilit...
Matrixssl Matrixssl 3.8.7b
4.3
CVSSv2
CVE-2016-6883
MatrixSSL prior to 3.8.3 configured with RSA Cipher Suites allows remote malicious users to obtain sensitive information via a Bleichenbacher variant attack.
Matrixssl Matrixssl
4.3
CVSSv2
CVE-2016-6884
TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL prior to 3.8.3 allow remote malicious users to cause a denial of service (out-of-bounds read) via a crafted message.
Matrixssl Matrixssl
4.3
CVSSv2
CVE-2016-6882
MatrixSSL prior to 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote malicious users to obtain RSA private key information by conducting a Lenstra side-channel attack.
Matrixssl Matrixssl
4.3
CVSSv2
CVE-2016-8671
The pstm_exptmod function in MatrixSSL 3.8.6 and previous versions does not properly perform modular exponentiation, which might allow remote malicious users to predict the secret key via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-20...
Matrixssl Matrixssl
5
CVSSv2
CVE-2016-6885
The pstm_exptmod function in MatrixSSL prior to 3.8.4 allows remote malicious users to cause a denial of service (invalid free and crash) via a base zero value for the modular exponentiation.
Matrixssl Matrixssl
5
CVSSv2
CVE-2016-6886
The pstm_reverse function in MatrixSSL prior to 3.8.4 allows remote malicious users to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's modulus for the secret key during RSA key exchange.
Matrixssl Matrixssl
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »