Skip to content

CVE-2016-6890 Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.

CriticalCVSS 9.8 EPSS 6.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate.

Affected products

ProductAffected versionsFixed in
matrixssl <= 3.8.5 No fix listed

References

  • 93498 third-party-advisory vdb-entry
  • www.tripwire.com technical-description third-party-advisory
  • github.com patch release-notes third-party-advisory
  • VU#396440 third-party-advisory us-government-resource