PT-2018-5192

CVE-2017-1000416

Published

2018-01-22

Updated

2019-10-03

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions axTLS version 1.5.3

Description The issue is caused by a coding error in the ASN.1 parser, which misinterprets the year 1950 in UTCTime as 2050.

Recommendations For axTLS version 1.5.3, update to a newer version that contains a fix for this issue to prevent misinterpretation of UTCTime.

Exploitability

Fix

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾