Matrixssl vulnerabilities

Products

• Matrixssl 24

Newest

• rambus tls toolkit, matrixssl +1 more Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow... CVE-2023-24609 7.5 HighDecember 22, 2023
• matrixssl An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID... CVE-2022-46505 Public exploit 7.5 HighJanuary 18, 2023
• matrixssl MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve remote code executio… CVE-2022-43974 8.1 HighJanuary 9, 2023
• matrixssl In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to... CVE-2019-16747 7.5 HighDecember 30, 2020
• matrixssl MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. This... CVE-2019-13629 5.9 MediumOctober 3, 2019
• matrixssl In MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages... CVE-2019-14431 9.8 CriticalJuly 29, 2019
• matrixssl MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling. CVE-2019-13470 9.8 CriticalJuly 9, 2019
• matrixssl pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has... CVE-2019-10914 9.8 CriticalApril 8, 2019
• matrixssl MatrixSSL through 3.9.5 Open allows a memory-cache side-channel attack on ECDSA signatures, aka... CVE-2018-12439 4.7 MediumJune 15, 2018
• matrixssl MatrixSSL version 3.7.2 adopts a collision-prone OID comparison logic resulting in possible... CVE-2017-1000417 5.3 MediumJanuary 22, 2018
• matrixssl MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate... CVE-2017-1000415 5.9 MediumJanuary 9, 2018
• matrixssl An integer overflow vulnerability exists in the X509 certificate parsing functionality of... CVE-2017-2782 6.5 MediumJune 22, 2017
• inside secure matrixssl An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing... CVE-2017-2781 8.1 HighJune 22, 2017
• inside secure matrixssl An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing... CVE-2017-2780 8.1 HighJune 22, 2017
• matrixssl TLS cipher suites with CBC mode in TLS 1.1 and 1.2 in MatrixSSL before 3.8.3 allow remote... CVE-2016-6884 6.5 MediumMarch 3, 2017
• matrixssl MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain... CVE-2016-6883 EPSS 13.9% 5.9 MediumMarch 3, 2017
• matrixssl MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for... CVE-2016-6882 5.9 MediumMarch 3, 2017
• matrixssl The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular... CVE-2016-8671 5.9 MediumJanuary 13, 2017
• matrixssl The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular... CVE-2016-6887 5.9 MediumJanuary 13, 2017
• matrixssl The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of... CVE-2016-6886 7.5 HighJanuary 13, 2017
• matrixssl The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of... CVE-2016-6885 7.5 HighJanuary 13, 2017
• matrixssl The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a... CVE-2016-6892 7.5 HighJanuary 5, 2017
• matrixssl MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read)... CVE-2016-6891 7.5 HighJanuary 5, 2017
• matrixssl Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary... CVE-2016-6890 9.8 CriticalJanuary 5, 2017