CVE-2017-1000415 | BDVDB-2026-94936 Detail

Description#

MatrixSSL version 3.7.2 has an incorrect UTCTime date range validation in its X.509 certificate validation process resulting in some certificates have their expiration (beginning) year extended (delayed) by 100 years.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.ieee-security.org/TC/SP2017/papers/231.pdf
https://www.youtube.com/watch?v=FW--c_F_cY8

Exploit#

No public exploit known

History#

Version 12018-01-09Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.