CVEvulnerability
CVE-2017-1000415
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-01-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-295
Description
MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years.
Affected configurations
• matrixssl matrixssl 3.7.2
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- https://www.ieee-security.org/TC/SP2017/papers/231.pdf Third Party Advisory
- https://www.youtube.com/watch?v=FW--c_F_cY8 Third Party Advisory
- https://www.ieee-security.org/TC/SP2017/papers/231.pdf Third Party Advisory
- https://www.youtube.com/watch?v=FW--c_F_cY8 Third Party Advisory