Lucene search

[email protected]NVD:CVE-2017-1000415

HistoryJan 09, 2018 - 8:29 p.m.

CVE-2017-1000415

2018-01-0920:29:00

CWE-295

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

37.9%

JSON

MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years.

Affected configurations

Nvd

Node

matrixsslmatrixsslMatch3.7.2

VendorProductVersionCPE
matrixsslmatrixssl3.7.2cpe:2.3:a:matrixssl:matrixssl:3.7.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
matrixssl	matrixssl	3.7.2	cpe:2.3:a:matrixssl:matrixssl:3.7.2:::::::*

References

www.ieee-security.org/TC/SP2017/papers/231.pdf

www.youtube.com/watch?v=FW--c_F_cY8

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

37.9%

JSON

Related for NVD:CVE-2017-1000415

cve1 ubuntucve1 prion1 cvelist1 openvas1