MA
Vendor
Matrixssl
24
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-24609 | MA Matrixssl Matrixssl | 7.5 | Dec 22 | Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server |
| CVE-2022-46505 | MA Matrixssl Matrixssl | 7.5 | Jan 18 | An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret… |
| CVE-2022-43974 | MA Matrixssl Matrixssl | 9.8 | Jan 9 | MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13 |
| CVE-2019-16747 | MA Matrixssl Matrixssl | 7.5 | Dec 30 | In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a… |
| CVE-2019-13629 | MA Matrixssl Matrixssl | 5.9 | Oct 3 | MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation |
| CVE-2019-14431 | MA Matrixssl Matrixssl | 9.8 | Jul 29 | In MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of up to 256 bytes and possible Remote… |
| CVE-2019-13470 | MA Matrixssl Matrixssl | 9.8 | Jul 9 | MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling |
| CVE-2019-10914 | MA Matrixssl Matrixssl | 9.8 | Apr 8 | pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of… |
| CVE-2018-12439 | MA Matrixssl Matrixssl | 4.7 | Jun 15 | MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka the Return Of the Hidden Number Problem or ROHNP |
| CVE-2017-1000417 | MA Matrixssl Matrixssl | 5.3 | Jan 22 | MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible spoofing of OIDs (e.g |
| CVE-2017-1000415 | MA Matrixssl Matrixssl | 5.9 | Jan 9 | MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning)… |
| CVE-2017-2782 | MA Matrixssl Matrixssl | 9.1 | Jun 22 | An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b |
| CVE-2017-2781 | MA Matrixssl Matrixssl | 9.8 | Jun 22 | An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b |
| CVE-2017-2780 | MA Matrixssl Matrixssl | 9.8 | Jun 22 | An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b |
| CVE-2016-6884 | MA Matrixssl Matrixssl | 6.5 | Mar 3 | TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote attackers to cause a denial of service (out-of-bounds read) via a crafted message |
| CVE-2016-6883 | MA Matrixssl Matrixssl | 5.9 | Mar 3 | MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack |
| CVE-2016-6882 | MA Matrixssl Matrixssl | 5.9 | Mar 3 | MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra… |
| CVE-2016-8671 | MA Matrixssl Matrixssl | 5.9 | Jan 13 | The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via… |
| CVE-2016-6887 | MA Matrixssl Matrixssl | 5.9 | Jan 13 | The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT… |
| CVE-2016-6886 | MA Matrixssl Matrixssl | 7.5 | Jan 13 | The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's… |
| CVE-2016-6885 | MA Matrixssl Matrixssl | 7.5 | Jan 13 | The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base zero value for the modular… |
| CVE-2016-6892 | MA Matrixssl Matrixssl | 7.5 | Jan 5 | The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate |
| CVE-2016-6891 | MA Matrixssl Matrixssl | 7.5 | Jan 5 | MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate |
| CVE-2016-6890 | MA Matrixssl Matrixssl | 9.8 | Jan 5 | Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate |