Tls Toolkit
1 CVEs
product
Monthly
Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Integer Overflow
Buffer Overflow
Matrixssl
Tls Toolkit
NVD
CVSS 3.1
7.5
EPSS
0.7%
EPSS 1%
CVSS 7.5
HIGH
POC
This Week
Matrix SSL 4.x through 4.6.0 and Rambus TLS Toolkit have a length-subtraction integer overflow for Client Hello Pre-Shared Key extension parsing in the TLS 1.3 server. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Integer Overflow
Buffer Overflow
Matrixssl
+1
NVD