CVE-2017-2780: Buffer Overflow

Published Jun 22, 2017

Updated

An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 certificate can cause a buffer overflow on the heap resulting in remote code execution. To trigger this vulnerability, a specially crafted x509 certificate must be presented to the vulnerable client or server application when initiating secure connection.

Affected Software

1 affected component

MatrixSSL MatrixSSL=3.8.7b

Event History

Jun 22, 2017

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-2780?

CVE-2017-2780 is considered a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2017-2780?

To mitigate CVE-2017-2780, upgrade to a later version of MatrixSSL that does not contain this vulnerability.

What causes the CVE-2017-2780 vulnerability?

CVE-2017-2780 is caused by a heap buffer overflow in the X509 certificate parsing functionality of MatrixSSL 3.8.7b.

What impact does CVE-2017-2780 have on systems?

CVE-2017-2780 can lead to remote code execution, allowing attackers to execute arbitrary code on affected systems.

Is CVE-2017-2780 specific to any software version?

Yes, CVE-2017-2780 specifically affects MatrixSSL version 3.8.7b.