CVE-2016-6885
HIGHMatrixSSL < 3.8.3 - Denial of Service via Modular Exponentiation Base Zero
Title source: llmDescription
The pstm_exptmod function in MatrixSSL before 3.8.4 allows remote attackers to cause a denial of service (invalid free and crash) via a base zero value for the modular exponentiation.
References (2)
Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.matrixssl.org/blog/releases/matrixssl_3_8_4
Third Party Advisory x_refsource_misc
https://blog.fuzzing-project.org/51-Fun-with-Bignums-Crashing-MatrixSSL-and-more.html
Scores
CVSS v3
7.5
EPSS
0.0133
EPSS Percentile
67.6%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-416
Status
published
Products (1)
matrixssl/matrixssl
< 3.8.3
Published
Jan 13, 2017
Tracked Since
Feb 18, 2026