CVE-2016-6890

Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate...

CVE-2016-6892: Use After Free

The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service free of unallocated memory via a crafted X.509 certificate...

CVE-2016-6890: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate...

CVE-2016-6891: Out-of-bounds Read

MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service out-of-bounds read via a crafted ASN.1 Bit Field primitive in an X.509 certificate...

MatrixSSL pstm_exptmod Function Miscalculation Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. The pstmexptmod in MatrixSSL inputs incorrect results for certain parameters, causing the associated cryptographic functions to fail to handle the private key...

INSIDE Secure MatrixSSL Denial of Service Vulnerability (CNVD-2016-09588)

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. A denial of service vulnerability exists in MatrixSSL, which can be exploited by an attacker to cause a denial of service...

INSIDE Secure MatrixSSL Buffer Overflow Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. A buffer overflow vulnerability exists in several versions of MatrixSSL, which can be exploited by an attacker to execute arbitrary code...

MatrixSSL Detection (HTTP)

HTTP based detection of MatrixSSL. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it...

MatrixSSL <= 3.8.5 Multiple Vulnerabilities

MatrixSSL is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MatrixSSL contains multiple vulnerabilities

Overview MatrixSSL, version 3.8.5 and earlier, contains heap overflow, out-of-bounds read, and unallocated memory free operation vulnerabilities. Description CWE-122: Heap-based Buffer Overflow - CVE-2016-6890The Subject Alt Name field of X.509 certificates is not properly parsed. A specially...

INSIDE Secure MatrixSSL Denial of Service Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. A denial of service vulnerability exists in INSIDE Secure MatrixSSL. An attacker could exploit this vulnerability to cause a denial of service and crash the...

INSIDE Secure MatrixSSL Denial of Service Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. A denial of service vulnerability exists in INSIDE Secure MatrixSSL. An attacker could exploit this vulnerability to cause a denial of service and crash the...

INSIDE Secure MatrixSSL Denial of Service Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. A denial of service vulnerability exists in INSIDE Secure MatrixSSL, which can be exploited by an attacker to crash an application and cause a denial of service...

INSIDE Secure MatrixSSL Information Disclosure Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. An information disclosure vulnerability exists in versions of INSIDE Secure MatrixSSL prior to 3.8.3. An attacker could exploit this vulnerability to conduct a...

INSIDE Secure MatrixSSL Information Disclosure Vulnerability (CNVD-2016-06540)

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. An information disclosure vulnerability exists in versions of INSIDE Secure MatrixSSL prior to 3.8.3. An attacker could exploit this vulnerability to conduct a...

INSIDE Secure MatrixSSL Information Disclosure Vulnerability

INSIDE Secure MatrixSSL is an embedded, open source SSLv3 stack from INSIDE Secure, France, designed for small applications and devices. An information disclosure vulnerability exists in versions of INSIDE Secure MatrixSSL prior to 3.8.3, which can be exploited by an attacker to conduct a...

SSL Encryption — Securing Internet of Things (IoT)

Internet of Things IoT with the purpose of providing convenience to the users enabled every object in the universe to be as smart as a whip. By assigning IP address to all sorts of devices, ranging from household appliances, machines, medical devices and sensors to other day-to-day objects, and...

MatrixSSL拒绝服务漏洞

MatrixSSL是针对小型应用程序和设备设计的嵌入式、开放源码SSLv3协议栈（商业版支持TLS协议）。 MatrixSSL中解析ECC密文套件参数和安全重协商的TLS扩展存在多个边界错误，允许攻击者利用漏洞提交特殊请求，触发越界内存访问，造成拒绝服务攻击。 0 MatrixSSL 3.x MatrixSSL 3.6.1版本已修复该漏洞，建议用户下载使用： http://www.matrixssl.org...

CVE-2004-2681

PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote attackers to hijack a session...

CVE-2004-2682

PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the server's private key by determining factors using timing differences on 1 the number of extra reductions during Montgomery reduction, and 2 the use of different integer...