Description
In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a different vulnerability than CVE-2019-14431.
References (3)
Core 3
Core References
Exploit, Third Party Advisory x_refsource_misc
https://github.com/matrixssl/matrixssl/issues/33
Third Party Advisory x_refsource_confirm
https://github.com/matrixssl/matrixssl/releases/tag/4-2-2-open
Release Notes, Third Party Advisory x_refsource_confirm
https://github.com/matrixssl/matrixssl/blob/4-2-2-open/doc/CHANGES_v4.x.md
Scores
CVSS v3
7.5
EPSS
0.0177
EPSS Percentile
75.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-787
Status
published
Products (1)
matrixssl/matrixssl
< 4.2.2
Published
Dec 30, 2020
Tracked Since
Feb 18, 2026