CVE-2016-6890
CriticalSummary
Heap-based buffer overflow in MatrixSSL before version 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code remotely, posing a significant security risk to systems using MatrixSSL.
Recommendation
It is recommended to upgrade MatrixSSL to version 3.8.6 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in MatrixSSL
See all- CVE-2016-6886High
The pstm_reverse function in MatrixSSL before version 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a zero value or the key's modulus for the secret key during RSA key exchange.
- CVE-2016-6885High
The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base zero value for the modular exponentiation.
- CVE-2016-6892High
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.
- CVE-2016-6891High
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.
Original NVD description (English source)
Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.