CVE-2022-43974

Description

References

• matrixssl/matrixssl · Release Notes
• matrixssl/matrixssl security advisory · Third Party Advisory
• telekom.com/en/company/data-privacy-and-security/news/advisories-504842 · Vendor Advisory

Altre vulnerabilità di matrixssl

• CVE-2023-24609ALTO 7.5Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension par…
• CVE-2022-46505ALTO 7.5An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero …
• CVE-2019-16747ALTO 7.5In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via …
• CVE-2019-13629MEDIO 5.9MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or a remote attacker, able to …
• CVE-2019-14431CRITICO 9.8In MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of …