CVE-2017-2782 Integer overflow in n/a
A specially crafted X509 certificate can trigger an integer overflow in MatrixSSL, leading to out-of-bounds memory copy and potential code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-2782?
CVE-2017-2782 is a medium-severity vulnerability in n/a, published on 22 Jun 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a length counter to overflow, leading to a controlled out of bounds copy operation. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection
Weakness: CWE-190
Which versions are affected by CVE-2017-2782?
It affects 1 product.
Products include Matrixssl Matrixssl.
How do I fix CVE-2017-2782?
No fix has been published for CVE-2017-2782 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-2782 being exploited?
There is no known exploitation of CVE-2017-2782 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-gv8r-m42c-756r.