CVE-2016-8671

概要

参考情報

• openwall.com/lists/oss-security/2016/10/15/2 · Mailing List
• openwall.com/lists/oss-security/2016/10/15/8 · Mailing List
• securityfocus.com/bid/95439
• blog.fuzzing-project.org/54-Update-on-MatrixSSL-miscalculation-CVE-2016-8671%2C-incomplete-fix-for-CVE-2016-6887.html

matrixssl のその他の脆弱性

• CVE-2023-24609高 7.5Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension par…
• CVE-2022-46505高 7.5An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero …
• CVE-2022-43974緊急 9.8MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message…
• CVE-2019-16747高 7.5In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via …
• CVE-2019-13629中 5.9MatrixSSL 4.2.1 and earlier contains a timing side channel in ECDSA signature generation. This allows a local or a remote attacker, able to …