CVE Details for CVE: CVE-2016-6892
Summary
The x509FreeExtensions function in MatrixSSL before 3.8.6 allows remote attackers to cause a denial of service (free of unallocated memory) via a crafted X.509 certificate.
| Timestamps | |
|---|---|
| Last major update | 06-01-2017 - 15:24 |
| Published | 05-01-2017 - 22:59 |
| Last modified | 06-01-2017 - 15:24 |
References
Vulnerable Configurations
-
cpe:2.3:a:matrixssl:matrixssl:-:*:*:*:*:*:*:*
cpe:2.3:a:matrixssl:matrixssl:-:*:*:*:*:*:*:*
-
cpe:2.3:a:matrixssl:matrixssl:3.8.2:*:*:*:*:*:*:*
cpe:2.3:a:matrixssl:matrixssl:3.8.2:*:*:*:*:*:*:*
-
cpe:2.3:a:matrixssl:matrixssl:3.8.3:*:*:*:*:*:*:*
cpe:2.3:a:matrixssl:matrixssl:3.8.3:*:*:*:*:*:*:*
-
cpe:2.3:a:matrixssl:matrixssl:3.8.4:*:*:*:*:*:*:*
cpe:2.3:a:matrixssl:matrixssl:3.8.4:*:*:*:*:*:*:*
-
cpe:2.3:a:matrixssl:matrixssl:3.8.5:*:*:*:*:*:*:*
cpe:2.3:a:matrixssl:matrixssl:3.8.5:*:*:*:*:*:*:*
CWE
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| NONE | NONE | PARTIAL |
CVSS3
Base
7.5
Impact
3.6
Exploitability
3.9
Access
| Attack Complexity | Attack vector | Privileges Required | Scope | User Interaction |
|---|---|---|---|---|
| LOW | NETWORK | NONE | UNCHANGED | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| NONE | NONE | HIGH |