CVE-2017-1000415

MEDIUM

MatrixSSL 3.7.2 - Improper Certificate Validation in X.509 UTCTime Date Range

Title source: llm
STIX 2.1

Description

MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years.

References (2)

Core 2
Core References
Third Party Advisory x_refsource_misc
https://www.ieee-security.org/TC/SP2017/papers/231.pdf
Third Party Advisory x_refsource_misc
https://www.youtube.com/watch?v=FW--c_F_cY8

Scores

CVSS v3 5.9
EPSS 0.0049
EPSS Percentile 37.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-295
Status published
Products (1)
matrixssl/matrixssl 3.7.2
Published Jan 09, 2018
Tracked Since Feb 18, 2026