CVE-2016-6887
MEDIUMMatrixssl < 3.8.6 - Information Disclosure
Title source: ruleDescription
The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular exponentiation, which might allow remote attackers to predict the secret key via a CRT attack.
Scores
CVSS v3
5.9
EPSS
0.0030
EPSS Percentile
52.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-200
Status
published
Affected Products (2)
matrixssl/matrixssl
< 3.8.6
n/a/n/a
Timeline
Published
Jan 13, 2017
Tracked Since
Feb 18, 2026