CVE-2017-1000416

MEDIUM

axtls 1.5.3 - Off-by-one Error in ASN.1 UTCTime Parser

Title source: llm
STIX 2.1

Description

axTLS version 1.5.3 has a coding error in the ASN.1 parser resulting in the year (19)50 of UTCTime being misinterpreted as 2050.

References (2)

Core 2
Core References
Technical Description, Third Party Advisory x_refsource_misc
https://www.ieee-security.org/TC/SP2017/papers/231.pdf
Third Party Advisory x_refsource_misc
https://www.youtube.com/watch?v=FW--c_F_cY8

Scores

CVSS v3 5.3
EPSS 0.0089
EPSS Percentile 54.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Details

CWE
CWE-193
Status published
Products (1)
axtls_project/axtls 1.5.3
Published Jan 22, 2018
Tracked Since Feb 18, 2026