PT-2018-5191
CVE-2017-1000415
·
Publicado
2018-01-09
·
Atualizado
2018-01-26
Descrição por
CVSS 3.1
5.9
MédiaMétricasAV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
MatrixSSL version 3.7.2
Description
The issue is related to an incorrect UTCTime date range validation in the X.509 certificate validation process. This results in some certificates having their expiration or beginning year extended by 100 years.
Recommendations
For MatrixSSL version 3.7.2, update to a version that correctly validates UTCTime date ranges in X.509 certificates to prevent incorrect certificate expiration or beginning year extensions.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾