Matrixssl
Vendor:
First CVE: Jan 5, 2017 · Active for 9 years
24
Total CVEs
More Total CVEs than 95% of tracked products
4.8
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 60% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Matrixssl over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 5, 2017
9 years ago
Most Recent CVE
Dec 22, 2023
945 days ago
CVE Severity & Scoring
Matrixssl24 CVEs
38%
29%
33%
All CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local1 (4.2%)
Network23 (95.8%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low17 (70.8%)
High7 (29.2%)
Unknown0 (0.0%)
User Interaction
None23 (95.8%)
Unknown0 (0.0%)
Required1 (4.2%)
Privileges Required
Low1 (4.2%)
High0 (0.0%)
None23 (95.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (24 CVEs).
24 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-43974CRITICAL MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve | Jan 9, 2023 | 9.8 | 31 | NO | NO |
CVE-2019-13470CRITICAL MatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling. | Jul 9, 2019 | 9.8 | 31 | NO | NO |
CVE-2017-2781CRITICAL An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can ca | Jun 22, 2017 | 9.8 | 31 | NO | NO |
CVE-2017-2780CRITICAL An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can ca | Jun 22, 2017 | 9.8 | 31 | NO | NO |
CVE-2019-14431CRITICAL In MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of up to 256 bytes and possible Remote Code | Jul 29, 2019 | 9.8 | 30 | NO | NO |
CVE-2019-10914CRITICAL pubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certificate verification because of miss | Apr 8, 2019 | 9.8 | 30 | NO | NO |
CVE-2016-6883MEDIUM MatrixSSL before 3.8.3 configured with RSA Cipher Suites allows remote attackers to obtain sensitive information via a Bleichenbacher variant attack. | Mar 3, 2017 | 5.9 | 30 | NO | YES |
CVE-2017-2782CRITICAL An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a length cou | Jun 22, 2017 | 9.1 | 28 | NO | NO |
CVE-2016-6890CRITICAL Heap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 certificate. | Jan 5, 2017 | 9.8 | 26 | NO | NO |
CVE-2022-46505HIGH An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret dat | Jan 18, 2023 | 7.5 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (24 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
4.2% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (24 CVEs).
Media Mentions
Signals from CVEs in this product scope (24 CVEs).
Top CNAs Publishing CVEs For Matrixssl
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.8.7b | 3 | 9.6 | 1.9% | 0 | 0 |
| 3.7.2 | 2 | 5.6 | 0.6% | 0 | 0 |