CVE-2017-1000415

Name of the Vulnerable Software and Affected Versions MatrixSSL version 3.7.2

Description The issue is related to an incorrect UTCTime date range validation in the X.509 certificate validation process. This results in some certificates having their expiration or beginning year extended by 100 years.

Recommendations For MatrixSSL version 3.7.2, update to a version that correctly validates UTCTime date ranges in X.509 certificates to prevent incorrect certificate expiration or beginning year extensions.