CVE-2016-6886
HighSummary
The pstm_reverse function in MatrixSSL before version 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a zero value or the key's modulus for the secret key during RSA key exchange.
Risk Assessment
An attacker can exploit this vulnerability to remotely crash the server, leading to service availability interruptions.
Recommendation
It is recommended to upgrade MatrixSSL to version 3.8.4 or later to mitigate this vulnerability.
Other vulnerabilities in MatrixSSL
See all- CVE-2016-6885High
The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base zero value for the modular exponentiation.
- CVE-2016-6892High
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.
- CVE-2016-6891High
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.
- CVE-2016-6890Critical
Heap-based buffer overflow in MatrixSSL before version 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.
Original NVD description (English source)
The pstm_reverse function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a (1) zero value or (2) the key's modulus for the secret key during RSA key exchange.