MatrixSSL <= 3.7.2 Multiple Vulnerabilities

MatrixSSL is prone multiple vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2017-1000417

MatrixSSL 3.7.2 is affected by a collision-prone OID comparison logic that can allow spoofing of OIDs (such as in the ExtKeyUsage extension) in X.509 certificates. The root cause is the OID comparison logic used by the library. The available connected documents confirm the vulnerability and affec...