CVE-2016-6891
HighSummary
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.
Risk Assessment
Attackers can exploit this vulnerability to disrupt services using MatrixSSL, potentially leading to downtime for the organization.
Recommendation
It is recommended to upgrade MatrixSSL to version 3.8.6 or later to mitigate this vulnerability.
Other vulnerabilities in MatrixSSL
See all- CVE-2016-6886High
The pstm_reverse function in MatrixSSL before version 3.8.4 allows remote attackers to cause a denial of service (invalid memory read and crash) via a zero value or the key's modulus for the secret key during RSA key exchange.
- CVE-2016-6885High
The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base zero value for the modular exponentiation.
- CVE-2016-6892High
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.
- CVE-2016-6890Critical
Heap-based buffer overflow in MatrixSSL before version 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.
Original NVD description (English source)
MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.