MatrixSSL has a Denial of Service Vulnerability Vulnerability

MatrixSSL is an embedded, open source SSLv3 stack designed for small applications and devices. A denial of service vulnerability vulnerability exists in the pstmexptmod&rsquo function of MatrixSSL prior to version 3.8.4. A remote attacker exploiting this vulnerability could launch a denial of...

PT-2017-9047

Name of the Vulnerable Software and Affected Versions MatrixSSL versions prior to 3.8.4 Description The issue allows remote attackers to cause a denial of service, resulting in an invalid free and crash, by providing a base zero value for the modular exponentiation in the pstm exptmod function...

PT-2017-9049

Name of the Vulnerable Software and Affected Versions MatrixSSL versions 3.8.6 and earlier Description The issue concerns the pstm exptmod function, which does not properly perform modular exponentiation. This could allow remote attackers to predict the secret key via a CRT attack. Recommendation...

PT-2017-9722

Name of the Vulnerable Software and Affected Versions MatrixSSL versions 3.8.6 and earlier Description The issue is related to the pstm exptmod function, which does not properly perform modular exponentiation. This could allow remote attackers to predict the secret key via unspecified vectors...