Stack overflow

2019-04-0814:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.1%

JSON

pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of missing validation in psRsaDecryptPubExt in crypto/pubkey/rsa_pub.c.

CPENameOperatorVersion
matrixsslle4.0.2

CPE	Name	Operator	Version
	matrixssl	le	4.0.2

References

bugs.chromium.org/p/project-zero/issues/detail?id=1785

github.com/matrixssl/matrixssl/issues/26

github.com/matrixssl/matrixssl/releases/tag/4-0-2-open

www.openwall.com/lists/oss-security/2019/02/15/1