PT-2018-5192 · Axtls · Axtls

Published 2018-01-22 · Updated 2019-10-03 · CVE-2017-1000416

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions axTLS version 1.5.3

Description The issue is caused by a coding error in the ASN.1 parser, which misinterprets the year 1950 in UTCTime as 2050.

Recommendations For axTLS version 1.5.3, update to a newer version that contains a fix for this issue to prevent misinterpretation of UTCTime.

Fix

Weakness Enumeration

CWE-193

Related Identifiers

CVE-2017-1000416

Affected Products

Axtls

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2017-1000416 · Security Note
• https://osv.dev/vulnerability/CVE-2017-1000416 · Vendor Advisory
• https://youtube.com/watch?v=FW--c_F_cY8 · Note
• https://ieee-security.org/TC/SP2017/papers/231.pdf · Note