Skip to content

CVE-2016-6891 MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.

HighCVSS 7.5 EPSS 1.9%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted ASN.1 Bit Field primitive in an X.509 certificate.

Affected products

ProductAffected versionsFixed in
matrixssl <= 3.8.5 No fix listed

References

  • 93498 third-party-advisory vdb-entry
  • www.tripwire.com technical-description third-party-advisory
  • github.com patch release-notes third-party-advisory
  • VU#396440 third-party-advisory us-government-resource