MA
Product
Matrixssl
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 7Medium 9Low 0
Watch
Add Matrixssl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6884 | 6.5 | Mar 3 | TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted message Affected: through 3.8.2 |
| CVE-2019-13629 | 5.9 | Oct 3 | MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation Affected: through 4.2.1 |
| CVE-2017-1000415 | 5.9 | Jan 9 | MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning)… Affected: 3.7.2 |
| CVE-2016-6883 | 5.9 | Mar 3 | MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack Affected: through 3.8.2 |
| CVE-2016-6882 | 5.9 | Mar 3 | MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra… Affected: through 3.8.6 |
| CVE-2016-8671 | 5.9 | Jan 13 | The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via… Affected: through 3.8.6 |
| CVE-2016-6887 | 5.9 | Jan 13 | The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT… Affected: through 3.8.6 |
| CVE-2017-1000417 | 5.3 | Jan 22 | MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs (e.g Affected: 3.7.2 |
| CVE-2018-12439 | 4.7 | Jun 15 | MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP Affected: through 3.9.5 |
Showing 9