CVE-2016-6887 in MatrixSSL
Summary
The pstm_exptmod function in MatrixSSL 3.8.6 and earlier does not properly perform modular expontiation, which might allow remote attackers to predict the secret key via a CRT attack.
Reservation
08/19/2016
Disclosure
01/13/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 95316 | MatrixSSL Modular Expontiation pstm_exptmod information disclosure | 200 | Not defined | Not defined | CVE-2016-6887 |