MA
Product
Matrixssl
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 7Medium 9Low 0
Watch
Add Matrixssl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-24609 | 7.5 | Dec 22 | Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server Affected: 4.0.0 through 4.6.0 |
| CVE-2022-46505 | 7.5 | Jan 18 | An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret… Affected: through 4.5.1 |
| CVE-2019-16747 | 7.5 | Dec 30 | In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a… Affected: before 4.2.2 |
| CVE-2016-6886 | 7.5 | Jan 13 | The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's… Affected: through 3.8.3 |
| CVE-2016-6885 | 7.5 | Jan 13 | The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base zero value for the modular… Affected: through 3.8.3 |
| CVE-2016-6892 | 7.5 | Jan 5 | The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate Affected: through 3.8.5 |
| CVE-2016-6891 | 7.5 | Jan 5 | MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate Affected: through 3.8.5 |
Showing 7