Skip to content

CVE-2016-6892 The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.

HighCVSS 7.5 EPSS 1.9%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.

Affected products

ProductAffected versionsFixed in
matrixssl <= 3.8.5 No fix listed

References

  • 93498 third-party-advisory vdb-entry
  • www.tripwire.com technical-description third-party-advisory
  • github.com patch release-notes third-party-advisory
  • VU#396440 third-party-advisory us-government-resource