246 matches found
CVE-2016-6885: Use After Free
The pstmexptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid free and crash via a base zero value for the modular exponentiation...
CVE-2016-6886: Undefined Security Weakness
The pstmreverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service invalid memory read and crash via a 1 zero value or 2 the key's modulus for the secret key during RSA key exchange...
CVE-2016-8671: Exposure of Sensitive Information to an Unauthorized Actor
The pstmexptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via unspecified vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-6887...
Design/Logic Flaw
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service free of unallocated memory via a crafted X.509 certificate...
Out-of-bounds
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...
CVE-2016-6890
Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate...
CVE-2016-6890
Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate...
CVE-2016-6890
Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate...
CVE-2016-6891
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...
CVE-2016-6892
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service free of unallocated memory via a crafted X.509 certificate...
CVE-2016-6891
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...
CVE-2016-6891
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...
Heap overflow
Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate...
CVE-2016-6892
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service free of unallocated memory via a crafted X.509 certificate...
CVE-2016-6892
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service free of unallocated memory via a crafted X.509 certificate...
CVE-2016-6892
MatrixSSL 3.8.5 and earlier contains a denial-of-service issue (CVE-2016-6892) in the x509FreeExtensions function, where processing a crafted X.509 certificate can cause a free operation on unallocated memory. Affected component: MatrixSSL under versions
CVE-2016-6890
CVE-2016-6890 originates from a heap-based buffer overflow in MatrixSSL versions 3.8.5 and earlier, triggered by a crafted Subject Alternative Name in an X.509 certificate. This leads to remote code execution in vulnerable SSL stacks. The connected documents consistently identify the affected com...
CVE-2016-6891
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...
CVE-2016-6891
CVE-2016-6891 affects MatrixSSL before 3.8.6. A crafted ASN.1 Bit Field in an X.509 certificate can trigger an out-of-bounds read, leading to denial of service. The vulnerable line-of-code issue is the parsing of the Bit Field in X.509 certificates. A fix is available: upgrade MatrixSSL to versio...