← Vulnerability feed

Vulnerability record · CVE-2016-6882 · published 3 March 2017

CVE-2016-6882: Matrixssl information exposure vulnerability

MMatrixssl · Matrixssl

MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack.

5.9 CVSS 3.0 Medium EPSS 1.3% · top 30.5% CWE-200 · Information exposureCWE-320 · CWE-320
5.9CVSS 3.0 base score, v2 4.3
1.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References
17 Jun 2026Last modified by NVD

Description

MatrixSSL before 3.8.7, when the DHE_RSA based cipher suite is supported, makes it easier for remote attackers to obtain RSA private key information by conducting a Lenstra side-channel attack.

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.openwall.com/lists/oss-security/2016/08/19/7 Mailing ListPatch
http://www.securityfocus.com/bid/91488
https://access.redhat.com/blogs/766093/posts/1976703 Third Party Advisory
https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md#validation-of-rsa-signature-creation PatchRelease Notes
https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf Technical Description
http://www.openwall.com/lists/oss-security/2016/08/19/7 Mailing ListPatch
http://www.securityfocus.com/bid/91488
https://access.redhat.com/blogs/766093/posts/1976703 Third Party Advisory
https://github.com/matrixssl/matrixssl/blob/master/CHANGES.md#validation-of-rsa-signature-creation PatchRelease Notes
https://people.redhat.com/~fweimer/rsa-crt-leaks.pdf Technical Description

Track CVE-2016-6882 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-43974Matrixssl integer overflow vulnerabilityMatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause…EPSS 1.7%9.8CVE-2019-14431Matrixssl out-of-bounds write vulnerabilityIn MatrixSSL 3.8.3 Open through 4.2.1 Open, the DTLS server mishandles incoming network messages leading to a heap-based buffer overflow of up to 256…EPSS 3.6%9.8CVE-2019-13470Matrixssl out-of-bounds read vulnerabilityMatrixSSL before 4.2.1 has an out-of-bounds read during ASN.1 handling.EPSS 1.6%9.8CVE-2019-10914Matrixssl improper certificate validation vulnerabilitypubRsaDecryptSignedElementExt in MatrixSSL 4.0.1 Open, as used in Inside Secure TLS Toolkit, has a stack-based buffer overflow during X.509 certifica…EPSS 1.4%9.8CVE-2017-2780Matrixssl out-of-bounds write vulnerabilityAn exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially …EPSS 2.3%9.8CVE-2017-2781Matrixssl out-of-bounds write vulnerabilityAn exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially …EPSS 2.3%9.8CVE-2016-6890Matrixssl memory buffer overflow vulnerabilityHeap-based buffer overflow in MatrixSSL before 3.8.6 allows remote attackers to execute arbitrary code via a crafted Subject Alt Name in an X.509 cer…EPSS 6.4%9.1CVE-2017-2782Matrixssl integer overflow vulnerabilityAn integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. A specially crafted x509 cer…EPSS 1.0%

Source: NIST National Vulnerability Database (record CVE-2016-6882), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.