PT-2018-5192 · Axtls · Axtls

Publicado 2018-01-22 · Atualizado 2019-10-03 · CVE-2017-1000416

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions axTLS version 1.5.3

Description The issue is caused by a coding error in the ASN.1 parser, which misinterprets the year 1950 in UTCTime as 2050.

Recommendations For axTLS version 1.5.3, update to a newer version that contains a fix for this issue to prevent misinterpretation of UTCTime.

Correção

Enumeração de Fraquezas

CWE-193

Identificadores relacionados

CVE-2017-1000416

Produtos afetados

Axtls

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000416 · Nota de Segurança
• https://youtube.com/watch?v=FW--c_F_cY8 · Nota
• https://ieee-security.org/TC/SP2017/papers/231.pdf · Nota
• https://osv.dev/vulnerability/CVE-2017-1000416 · Aviso do Fabricante