PT-2017-9722 · Matrixssl · Matrixssl

Hanno Böck · Publicado 2017-01-13 · Atualizado 2017-01-19 · CVE-2016-8671

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MatrixSSL versions 3.8.6 and earlier

Description The issue is related to the pstm exptmod function, which does not properly perform modular exponentiation. This could allow remote attackers to predict the secret key via unspecified vectors.

Recommendations For MatrixSSL versions 3.8.6 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-8671

Produtos afetados

Matrixssl

Referências · 6

• http://securityfocus.com/bid/95439 · Nota
• http://openwall.com/lists/oss-security/2016/10/15/2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8671 · Nota de Segurança
• https://blog.fuzzing-project.org/54-Update-on-MatrixSSL-miscalculation-CVE-2016-8671%2C-incomplete-fix-for-CVE-2016-6887.html · Nota
• http://openwall.com/lists/oss-security/2016/10/15/8 · Nota
• https://osv.dev/vulnerability/CVE-2016-8671 · Aviso do Fabricante